CVE-2012-3441: High severity Icinga Icinga vulnerability
The database creation script (module/idoutils/db/scripts/createmysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3441?
CVE-2012-3441 is classified as a high severity vulnerability due to its potential to grant unauthorized access to sensitive databases.
How do I fix CVE-2012-3441?
To fix CVE-2012-3441, you should modify the database user permissions to restrict access to only necessary databases.
Which versions of Icinga are affected by CVE-2012-3441?
CVE-2012-3441 specifically affects Icinga version 1.7.1.
What are the implications of CVE-2012-3441 for Icinga users?
The implications of CVE-2012-3441 include the risk of icinga users accessing and manipulating other databases, potentially leading to data breaches.
Is CVE-2012-3441 still a concern in current software environments?
Despite being discovered in 2012, CVE-2012-3441 can still pose a concern in environments that continue to run the vulnerable version of Icinga.