CVE-2025-61789
Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values assigned to it. Versions 1.1.4 and 1.2.3 respond with an error if such a custom variable is used.
Vendor
Product
CWE
Yayın Tarihi
2025-10-16 17:15:34
Güncelleme
2025-12-11 18:24:46
Source Identifier
security-advisories@github.com
KEV Date Added
-