Unscored severity · published Aug 25, 2012
CVE-2012-3441
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Icinga · Icinga
1.7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3441
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3441
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2012-08/msg00012.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/07/30/6
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/07/30/7
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=767319
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/78874
git.icinga.org
https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=712813d3118a5b9e5a496179cab81dbe91f69d63
More from Icinga
9.8
CVE-2025-48057
Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
9.8
CVE-2024-49369
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
9.1
CVE-2020-29663
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL
8.8
CVE-2021-32743
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
8.8
CVE-2021-32739
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting