Lucene search
Veracode Vulnerability DatabaseVERACODE:34598HistoryMar 11, 2022 - 2:35 a.m.
Information Disclosure
2022-03-1102:35:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
icinga web 2
information disclosure
web-server
attacker
file leakage
EPSS
0.283
Percentile
96.9%
Icinga Web 2 is vulnerable to information disclosure. The vulnerability exists due to a lack of validation of access to the web-server allowing an attacker to leak the contents of the files of the local system.
References
packetstormsecurity.com/files/171774/Icinga-Web-2.10-Arbitrary-File-Disclosure.html
github.com/Icinga/icingaweb2/commit/9931ed799650f5b8d5e1dc58ea3415a4cdc5773d
github.com/Icinga/icingaweb2/security/advisories/GHSA-5p3f-rh28-8frw
security-tracker.debian.org/tracker/CVE-2022-24716
security.gentoo.org/glsa/202208-05
Related
githubexploit
githubexploit
Exploit for Path Traversal in Icinga Icinga Web 2
2023-03-26 01:03:07
Exploit for Path Traversal in Icinga Icinga Web 2
2023-03-20 02:25:55
Exploit for Path Traversal in Icinga Icinga Web 2
2023-05-20 18:43:46
exploitdb
exploitdb
Icinga Web 2.10 - Arbitrary File Disclosure
2023-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2022-24716
2022-03-08 00:00:00
packetstorm
packetstorm
Icingaweb Directory Traversal In Static Library File Requests
2024-09-01 00:00:00
Icinga Web 2.10 Arbitrary File Disclosure
2023-04-10 00:00:00
metasploit
metasploit
Icingaweb Directory Traversal in Static Library File Requests
2023-04-21 20:27:52
prion
prion
Design/Logic Flaw
2022-03-08 20:15:00
nuclei
nuclei
Icinga Web 2 - Arbitrary File Disclosure
2023-05-08 17:24:19
cvelist
cvelist
CVE-2022-24716 Path traversal in Icinga Web 2
2022-03-08 00:00:00
debiancve
debiancve
CVE-2022-24716
2022-03-08 20:15:07
openvas
openvas
Icinga Web 2 2.9.x < 2.9.6 Path Traversal Vulnerability - Version Check
2022-03-09 00:00:00
Icinga Web 2 2.9.x < 2.9.6 Path Traversal Vulnerability - Active Check
2022-03-09 00:00:00
Generic HTTP Directory Traversal (Web Dirs) - Active Check
2021-07-22 00:00:00
cve
cve
CVE-2022-24716
2022-03-08 20:15:07
nvd
nvd
CVE-2022-24716
2022-03-08 20:15:07
osv
osv
CVE-2022-24716
2022-03-08 20:15:07
zdt
zdt
Icinga Web 2.10 - Arbitrary File Disclosure Exploit
2023-04-08 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-05-05 18:48:25
nessus
nessus
GLSA-202208-05 : Icinga Web 2: Multiple Vulnerabilities
2022-08-04 00:00:00
gentoo
gentoo
Icinga Web 2: Multiple Vulnerabilities
2022-08-04 00:00:00