POC Details: a4e14853b4196abb8f3f34c03dcb40b778b66535

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/icinga-installer.yaml

Associated Vulnerability

Likely 0-day

Description

Icinga Web 2 installer/setup wizard is publicly accessible. The setup page at /icingaweb2/setup exposes the configuration wizard which guides through full application configuration including database credentials, authentication backends, and admin account creation. While a setup token is required to proceed, the exposure of the installer itself is a serious misconfiguration that signals an incomplete or improperly secured installation.

File Snapshot


 id: icinga-installer

info:
  name: Icinga Web 2 Installer Exposure
  author: pussycat0x
  severity:

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.