| Package | Affected versions | Patched versions |
|---|---|---|
| icinga | ≥ 2.0.0, ≤ 2.8.0 |
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free