Directory Traversal Vulnerability in Icinga Web2 by Icinga
CVE-2020-24368

7.5HIGH

Key Information:

Vendor: Icinga
Status: Icinga Web 2
Vendor: CVE Published:; 19 August 2020

What is CVE-2020-24368?

Icinga Web2 versions 2.0.0 through 2.6.4, along with versions 2.7.4 and 2.8.2, are susceptible to a Directory Traversal vulnerability. This flaw enables an attacker to access arbitrary files that the process running Icinga Web2 can read, potentially compromising sensitive data. Remediation is available in the updated versions 2.6.4, 2.7.4, and 2.8.2, which address this issue. Users are strongly advised to apply the necessary updates to safeguard their systems.