CVE-2020-14004: High severity icinga icinga web 2 vulnerability
An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-14004.
What is the severity of CVE-2020-14004?
The severity of CVE-2020-14004 is high (7.8).
What is the affected software?
The affected software includes Icinga2 versions prior to v2.12.0-rc1, openSUSE Backports SLE 15.0 SP1, openSUSE Backports SLE 15.0 SP2, openSUSE Leap 15.1, and openSUSE Leap 15.2.
How can the vulnerability be exploited?
The vulnerability can be exploited by an unprivileged user who has control over the /run/icinga2/cmd symlink.
Are there any references for CVE-2020-14004?
Yes, you can find references for CVE-2020-14004 at the following URLs: [http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00014.html](http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00014.html), [http://www.openwall.com/lists/oss-security/2020/06/12/1](http://www.openwall.com/lists/oss-security/2020/06/12/1), [https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004](https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004).