Security Advisory

CVE-2017-16933

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-24 05:00:00

Last updated 2024-08-05 20:43:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.

← Browse all CVEs View on cve.org ↗