CVE-2017-16933

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain…

published November 24, 2017

CVSS
—
EPSS
0%
Percentile
21.9
In the wild
Unconfirmed
What it is

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00305 · 21.9th percentile
Published
2017-11-24T05:00Z
EPSS history
Timeline
  • 24 NOV 05:00Z
    etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain…
    cvelistv5