漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Icinga 2 API users could access restricted values in filter expressions
Vulnerability Description
Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information that should be hidden from them, including global variables not permitted by the variables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed in versions 2.15.1, 2.14.7, and 2.13.13.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Icinga 2 安全漏洞
Vulnerability Description
Icinga 2是Icinga开源的一个监控系统。 Icinga 2 2.15.0及之前版本存在安全漏洞,该漏洞源于过滤表达式可访问未授权变量或对象,可能导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A