{"id":"CVE-2012-3441","aliases":["EUVD-2012-3408","GHSA-rpmx-xcm7-5crg"],"status":"published","title":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1...","description":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02409,"percentile":0.84202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2012-08-25T10:00:00Z","modified":"2026-06-16T23:43:13Z","products":[{"vendor":"icinga","product":"icinga"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/07/30/7","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=dcd45fb6931c4abf710829bee21af09f842bc281","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=712813d3118a5b9e5a496179cab81dbe91f69d63","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2012/07/30/6","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78874","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://git.icinga.org/?p=icinga-doc.git%3Ba=commitdiff%3Bh=619a08ca1178144b8a3a5caafff32a2d3918edab","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-08/msg00012.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=767319","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3441"},{"url":"https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=712813d3118a5b9e5a496179cab81dbe91f69d63"},{"url":"https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=dcd45fb6931c4abf710829bee21af09f842bc281"},{"url":"https://git.icinga.org/?p=icinga-doc.git;a=commitdiff;h=619a08ca1178144b8a3a5caafff32a2d3918edab"},{"url":"https://github.com/advisories/GHSA-rpmx-xcm7-5crg"}],"sources":{"cve":[{"id":"CVE-2012-3441","description":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.","status":"published","published":"2012-08-25T10:00:00Z","modified":"2024-08-06T20:05:12.554Z","updated_at":"2026-11-02T14:34:50.615647Z"}],"euvd":[{"id":"EUVD-2012-3408","description":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.","status":"published","published":"2012-08-25T10:00:00Z","modified":"2024-08-06T20:05:12Z","updated_at":"2026-11-03T01:56:10.882899Z"}],"ghsa":[{"id":"GHSA-rpmx-xcm7-5crg","title":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1...","description":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.","status":"published","published":"2022-05-17T01:44:02Z","modified":"2025-04-11T04:01:09Z","updated_at":"2026-11-02T15:01:11.561612Z"}],"nvd":[{"id":"CVE-2012-3441","description":"The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.","status":"published","published":"2012-08-25T10:29:51.16Z","modified":"2026-06-16T23:43:13.76Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:15.188652Z"}]}}