Login Request a demo
Unscored severity · published Jan 14, 2014
CVE-2013-7107
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Icinga · Icinga
through 1.10.2; 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +32 more · source: NVD
Affected product
IC
Icinga
Icinga
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7107
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7107
dev.icinga.org
https://dev.icinga.org/issues/5250
dev.icinga.org
https://dev.icinga.org/issues/5346
www.icinga.org
https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5/
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2014-02/msg00061.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/12/16/4
More from Icinga
9.8
CVE-2025-48057
Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
9.8
CVE-2024-49369
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
9.1
CVE-2020-29663
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL
8.8
CVE-2021-32743
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting
8.8
CVE-2021-32739
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting