PT-2021-4011 · Icingadb+4 · Icingadb+7

Julianbrost · Published 2021-07-15 · Updated 2024-11-16 · CVE-2021-32743

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Icinga versions prior to 2.11.10 Icinga versions 2.12.0 through 2.12.4

Description The issue concerns the exposure of credentials for external services through the API to authenticated API users with read permissions for the corresponding object types. Specifically, IdoMysqlConnection and IdoPgsqlConnection expose the password of the user used to connect to the database, IcingaDB exposes the password used to connect to the Redis server, and ElasticsearchWriter exposes the password used to connect to the Elasticsearch server. An attacker who obtains these credentials can impersonate Icinga to these services and add, modify, and delete information there. If credentials with more permissions are in use, this increases the impact accordingly.

Recommendations For Icinga versions prior to 2.11.10, update to version 2.11.10 or later to resolve the issue. For Icinga versions 2.12.0 through 2.12.4, update to version 2.12.5 or later to resolve the issue. As a temporary workaround, restrict API user permissions to not allow querying of any affected objects, either by explicitly listing only the required object types for object query permissions, or by applying a filter rule.

Exploit

Fix

Weakness Enumeration

CWE-202

Related Identifiers

BDU:2021-04536

CVE-2021-32743

DLA-2816-1

DLA-3953-1

GHSA-WRPW-PMR8-QGJ7

OPENSUSE-SU-2021:1089-1

OPENSUSE-SU-2021_1089-1

OPENSUSE-SU-2024:10856-1

Affected Products

Elasticsearch

Elasticsearchwriter

Icinga

Icingadb

Idomysqlconnection

Idopgsqlconnection

Redis

Suse

References · 26

• 🔥 https://github.com/Icinga/icinga2/security/advisories/GHSA-wrpw-pmr8-qgj7 · Exploit
• 🔥 https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10 · Exploit
• https://osv.dev/vulnerability/DLA-2816-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10856-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-32743 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32743 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-32743 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1089-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3953-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32743 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-32743 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32743 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04536 · Security Note
• https://ubuntu.com/security/CVE-2021-32743 · Vendor Advisory
• https://github.com/Icinga/icinga2/commit/843353ab69f79b3abfeb38ac249b05e1944369ab · Note