PT-2022-6524 · Icinga · Icinga Web 2

Thomas-Chauchefoin-Sonarsource · Published 2022-02-10 · Updated 2023-04-10 · CVE-2022-24716

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Icinga Web 2 versions prior to 2.9.6 and 2.10

Description The issue allows unauthenticated users to leak the contents of files on the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. This is due to insufficient path name restrictions in the PHP framework. An attacker can exploit this to execute arbitrary code remotely.

Recommendations For versions prior to 2.9.6, update to version 2.9.6 or later. For versions prior to 2.10, update to version 2.10 or later. As a general measure, rotate database credentials to minimize potential damage from leaked credentials.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-01982

CVE-2022-24716

GHSA-5P3F-RH28-8FRW

Affected Products

Icinga Web 2

References · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/icinga_static_library_file_directory_traversal.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24716.json · Exploit
• 🔥 https://github.com/JacobEbben/CVE-2022-24716 · Exploit
• 🔥 https://github.com/joaoviictorti/CVE-2022-24716 · Exploit
• 🔥 https://github.com/doosec101/CVE-2022-24716 · Exploit
• 🔥 https://exploit-db.com/exploits/51329 · Exploit
• https://github.com/Icinga/icingaweb2/commit/9931ed799650f5b8d5e1dc58ea3415a4cdc5773d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24716 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24716 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-24716 · Security Note
• https://security.gentoo.org/glsa/202208-05 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-24716 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24716 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24716 · Security Note
• https://bdu.fstec.ru/vul/2023-01982 · Security Note