VYPR
High severity7.0NVD Advisory· Published Nov 24, 2017· Updated May 13, 2026

CVE-2017-16933

CVE-2017-16933

Description

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.

Affected products

1
  • cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*
    Range: >=2.0.0,<=2.8.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.