CVE-2013-7107
Debian Security Advisory 2956-1
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
Vulnerabilidad de cross-site request forgery (CSRF) en cmd.cgi en Icinga 1.8.5, 1.9.4, 1.10.2 y anteriores, permite a atacantes secuestrar la autenticación de usuarios en comandos no especificados a través de vectores no especificados, como se muestra sorteando requisitos de autenticación para el CVE-2013-7106.
Multiple security issues have been found in the Icinga host and network monitoring system (buffer overflows, cross-site request forgery, off-by ones) which could result in the execution of arbitrary code, denial of service or session hijacking.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-12-15 CVE Reserved
- 2014-01-14 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2013/12/16/4 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2014-02/msg00061.html | 2014-03-06 | |
| https://dev.icinga.org/issues/5250 | 2014-03-06 | |
| https://dev.icinga.org/issues/5346 | 2014-03-06 | |
| https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5 | 2014-03-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | <= 1.10.2 Search vendor "Icinga" for product "Icinga" and version " <= 1.10.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 0.8.0 Search vendor "Icinga" for product "Icinga" and version "0.8.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 0.8.1 Search vendor "Icinga" for product "Icinga" and version "0.8.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 0.8.2 Search vendor "Icinga" for product "Icinga" and version "0.8.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 0.8.3 Search vendor "Icinga" for product "Icinga" and version "0.8.3" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 0.8.4 Search vendor "Icinga" for product "Icinga" and version "0.8.4" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.0 Search vendor "Icinga" for product "Icinga" and version "1.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.0 Search vendor "Icinga" for product "Icinga" and version "1.0" | rc1 |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.0.1 Search vendor "Icinga" for product "Icinga" and version "1.0.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.0.2 Search vendor "Icinga" for product "Icinga" and version "1.0.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.0.3 Search vendor "Icinga" for product "Icinga" and version "1.0.3" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.2.0 Search vendor "Icinga" for product "Icinga" and version "1.2.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.2.1 Search vendor "Icinga" for product "Icinga" and version "1.2.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.3.0 Search vendor "Icinga" for product "Icinga" and version "1.3.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.3.1 Search vendor "Icinga" for product "Icinga" and version "1.3.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.4.0 Search vendor "Icinga" for product "Icinga" and version "1.4.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.4.1 Search vendor "Icinga" for product "Icinga" and version "1.4.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.6.0 Search vendor "Icinga" for product "Icinga" and version "1.6.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.6.1 Search vendor "Icinga" for product "Icinga" and version "1.6.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.6.2 Search vendor "Icinga" for product "Icinga" and version "1.6.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.7.0 Search vendor "Icinga" for product "Icinga" and version "1.7.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.7.1 Search vendor "Icinga" for product "Icinga" and version "1.7.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.7.2 Search vendor "Icinga" for product "Icinga" and version "1.7.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.7.3 Search vendor "Icinga" for product "Icinga" and version "1.7.3" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.7.4 Search vendor "Icinga" for product "Icinga" and version "1.7.4" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.8.0 Search vendor "Icinga" for product "Icinga" and version "1.8.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.8.1 Search vendor "Icinga" for product "Icinga" and version "1.8.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.8.2 Search vendor "Icinga" for product "Icinga" and version "1.8.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.8.3 Search vendor "Icinga" for product "Icinga" and version "1.8.3" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.8.4 Search vendor "Icinga" for product "Icinga" and version "1.8.4" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.8.5 Search vendor "Icinga" for product "Icinga" and version "1.8.5" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.9.0 Search vendor "Icinga" for product "Icinga" and version "1.9.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.9.1 Search vendor "Icinga" for product "Icinga" and version "1.9.1" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.9.2 Search vendor "Icinga" for product "Icinga" and version "1.9.2" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.9.3 Search vendor "Icinga" for product "Icinga" and version "1.9.3" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.9.4 Search vendor "Icinga" for product "Icinga" and version "1.9.4" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.10.0 Search vendor "Icinga" for product "Icinga" and version "1.10.0" | - |
Affected
| ||||||
| Icinga Search vendor "Icinga" | Icinga Search vendor "Icinga" for product "Icinga" | 1.10.1 Search vendor "Icinga" for product "Icinga" and version "1.10.1" | - |
Affected
| ||||||