Unrestricted Database Access Vulnerability in Icinga 1.7.1

CVE-2012-3441 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.