CNNVD-202510-2320 Information

CNNVD ID

CNNVD-202510-2320

CVE-2025-61907

  • CNNVD Published: 2025-10-16

Description (Chinese)

Icinga 2是Icinga开源的一个监控系统。 Icinga 2 2.15.0及之前版本存在安全漏洞,该漏洞源于过滤表达式可访问未授权变量或对象,可能导致信息泄露。

Description (English)

Icinga 2 is an Icinga open source monitoring system. There is a security loophole in Icinga 21.15.0 and earlier versions, which stems from filtering expressions to access unauthorized variables or objects, which may lead to the disclosure of information.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Icinga

Published

2025-10-16

Last Modified

2026-02-24

References

https://github.com/Icinga/icinga2/commit/56255ac7a689b9e198742d2fca6f7459a54c85a3 https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v

Patch

https://icinga.com/docs/icinga-2/latest/doc/01-about/

Share on: