Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2011-2179

HistoryJun 14, 2011 - 5:55 p.m.

CVE-2011-2179

2011-06-1417:55:06

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.026

Percentile

90.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.

OSVersionArchitecturePackageVersionFilename
Debian10allicinga< 1.4.1-1icinga_1.4.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	all	icinga	< 1.4.1-1	icinga_1.4.1-1_all.deb

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.026

Percentile

90.6%

JSON

Related for DEBIANCVE:CVE-2011-2179