VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 15, 2014· Updated Jun 17, 2026

CVE-2013-7107

CVE-2013-7107

Description

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

40
  • Icinga/Icinga39 versions
    cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*+ 38 more
    • cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*range: <=1.10.2
    • cpe:2.3:a:icinga:icinga:0.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:0.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:0.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:0.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:0.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:icinga:icinga:1.9.4:*:*:*:*:*:*:*
    • (no CPE)range: <=1.10.2
  • osv-coords
    pkg:deb/debian/icinga?arch=source
    Range: < 1.10.2-1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.