Local Privilege Escalation in Icinga 2 by Icinga Software
CVE-2017-16933

7HIGH

Key Information:

Vendor

Icinga

Status
Icinga
Vendor
CVE Published:
24 November 2017

What is CVE-2017-16933?

The chown call in the etc/initsystem/prepare-dirs script of Icinga 2 versions up to 2.8.1 creates a security risk by allowing local users to exploit the $ICINGA2_USER account. This vulnerability can be leveraged to escalate privileges due to improper handling of filenames in user-writable directories, enabling unauthorized users to create symbolic links that lead to increased access.

References

https://github.com/Icinga/icinga2/issues/5793
x_refsource_MISC

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.