{"id":"CVE-2022-24716","aliases":["DEBIAN-CVE-2022-24716","EUVD-2022-29577","GHSA-5p3f-rh28-8frw","UBUNTU-CVE-2022-24716"],"status":"published","title":"Path traversal in Icinga Web 2","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.89378,"percentile":0.99788,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-22"],"published":"2022-03-08T00:00:00Z","modified":"2026-11-03T06:01:36Z","exploits":[{"source":"pocgithub","id":"gmh5225/CVE-2022-24716","title":"gmh5225/CVE-2022-24716","date":"2023-03-20","url":"https://github.com/gmh5225/CVE-2022-24716"},{"source":"pocgithub","id":"pumpkinpiteam/CVE-2022-24716","title":"pumpkinpiteam/CVE-2022-24716","date":"2023-03-26","url":"https://github.com/pumpkinpiteam/CVE-2022-24716"},{"source":"pocgithub","id":"0x0Jackal/CVE-2022-24716","title":"0x0Jackal/CVE-2022-24716","date":"2023-03-27","url":"https://github.com/0x0Jackal/CVE-2022-24716"},{"source":"exploitdb","id":"EDB-51329","title":"Icinga Web 2.10 - Arbitrary File Disclosure","type":"webapps","platform":"php","date":"2023-04-08","url":"https://www.exploit-db.com/exploits/51329"},{"source":"pocgithub","id":"antisecc/CVE-2022-24716","title":"antisecc/CVE-2022-24716","date":"2023-05-20","url":"https://github.com/antisecc/CVE-2022-24716"},{"source":"pocgithub","id":"gmh5225/CVE-2022-24716-2","title":"gmh5225/CVE-2022-24716-2","date":"2024-04-22","url":"https://github.com/gmh5225/CVE-2022-24716-2"},{"source":"metasploit","id":"auxiliary/scanner/http/icinga_static_library_file_directory_traversal","title":"Icingaweb Directory Traversal in Static Library File Requests","type":"auxiliary","date":"2022-05-09","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/icinga_static_library_file_directory_traversal"},{"source":"nuclei","id":"CVE-2022-24716","title":"Icinga Web 2 - Arbitrary File Disclosure","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24716.yaml"}],"fixes":[{"ecosystem":"Debian:12","package":"icingaweb2","fixed_in":["2.9.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"icingaweb2","fixed_in":["2.9.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"icingaweb2","fixed_in":["2.9.6-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"icingaweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"icingaweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"icingaweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"icingaweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.2-2","2.9.3-1","2.9.4-1","2.9.5-1"]}],"products":[{"vendor":"icinga","product":"icinga_web_2"},{"vendor":"icinga","product":"icingaweb2"}],"references":[{"url":"https://github.com/Icinga/icingaweb2/security/advisories/GHSA-5p3f-rh28-8frw","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/Icinga/icingaweb2/commit/9931ed799650f5b8d5e1dc58ea3415a4cdc5773d","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://security.gentoo.org/glsa/202208-05","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/171774/Icinga-Web-2.10-Arbitrary-File-Disclosure.html","tags":["x_transferred","web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24716.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24716","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-24716","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24716","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-24716","title":"Path traversal in Icinga Web 2","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","status":"published","published":"2022-03-08T00:00:00Z","modified":"2025-04-23T18:58:45.413Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29577","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","status":"published","published":"2022-03-08T00:00:00Z","modified":"2025-04-23T18:58:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:52:07.453218Z"}],"nvd":[{"id":"CVE-2022-24716","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","status":"published","published":"2022-03-08T20:15:07.853Z","modified":"2026-06-17T04:32:21.573Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:13.7085Z"}],"osv":[{"id":"CVE-2022-24716","title":"Path traversal in Icinga Web 2","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","status":"published","published":"2022-03-08T00:00:00Z","modified":"2026-10-28T02:30:43.970101911Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-24716","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","status":"published","published":"2022-03-08T20:15:07.853Z","modified":"2026-11-03T08:01:05.038022256Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"UBUNTU-CVE-2022-24716","description":"Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.","status":"published","published":"2022-03-08T20:15:00Z","modified":"2025-09-08T16:50:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"}]}}