OPENSUSE-SU-2020:0067-1
Vulnerability from csaf_opensuse - Published: 2020-01-16 15:12 - Updated: 2026-09-20 19:02Summary
Security update for icingaweb2
Severity
Moderate
Notes
Title of the patch: Security update for icingaweb2
Description of the patch: This update for icingaweb2 to version 2.7.3 fixes the following issues:
icingaweb2 update to 2.7.3:
* Fixed an issue where servicegroups for roles with filtered objects
were not available
icingaweb2 update to 2.7.2:
* Performance imrovements and bug fixes
icingaweb2 update to 2.7.1:
* Highlight links in the notes of an object
* Fixed an issue where sort rules were no longer working
* Fixed an issue where statistics were shown with an anarchist way
* Fixed an issue where wildcards could no show results
icingaweb2 update to 2.7.0:
* New languages support
* Now module developers got additional ways to customize Icinga Web 2
* UI enhancements
icingaweb2 update to 2.6.3:
* Fixed various issues with LDAP
* Fixed issues with timezone
* UI enhancements
* Stability fixes
icingaweb2 update to 2.6.2:
You can find issues and features related to this release on our Roadmap.
This bugfix release addresses the following topics:
* Database connections to MySQL 8 no longer fail
* LDAP connections now have a timeout configuration which defaults to 5 seconds
* User groups are now correctly loaded for externally authenticated users
* Filters are respected for all links in the host and service group overviews
* Fixed permission problems where host and service actions provided by modules were missing
* Fixed an SQL error in the contact list view when filtering for host groups
* Fixed time zone (DST) detection
* Fixed the contact details view if restrictions are active
* Doc parser and documentation fixes
Fix security issues:
- CVE-2018-18246: fixed an CSRF in moduledisable (boo#1119784)
- CVE-2018-18247: fixed an XSS via /icingaweb2/navigation/add (boo#1119785)
- CVE-2018-18248: fixed an XSS attack is possible via query strings or a dir parameter (boo#1119801)
- CVE-2018-18249: fixed an injection of PHP ini-file directives involves environment variables as channel to send out information (boo#1119799)
- CVE-2018-18250: fixed parameters that can break navigation dashlets (boo#1119800)
- Remove setuid from new upstream spec file for following dirs:
/etc/icingaweb2,
/etc/icingaweb/modules,
/etc/icingaweb2/modules/setup,
/etc/icingaweb2/modules/translation,
/var/log/icingaweb2
icingaweb2 updated to 2.6.1:
- You can find issues and features related to this release on our
[Roadmap](https://github.com/Icinga/icingaweb2/milestone/51?closed=1).
- The command audit now logs a command's payload as JSON which fixes
a [bug](https://github.com/Icinga/icingaweb2/issues/3535)
that has been introduced in version 2.6.0.
icingaweb2 was updated to 2.6.0:
- You can find issues and features related to this release on our Roadmap.
* Enabling you to do stuff you couldn't before
- Support for PHP 7.2 added
- Support for SQLite resources added
- Login and Command (monitoring) auditing added with the help of a dedicated module
- Pluginoutput rendering is now hookable by modules which allows to render custom icons, emojis and .. cute kitties :octocat:
* Avoiding that you miss something
- It's now possible to toggle between list- and grid-mode for the host- and servicegroup overviews
- The servicegrid now supports to flip its axes which allows it to be put into a landscape mode
- Contacts only associated with services are visible now when restricted based on host filters
- Negated and combined membership filters now work as expected (#2934)
- A more prominent error message in case the monitoring backend goes down
- The filter editor doesn't get cleared anymore upon hitting Enter
* Making your life a bit easier
- The tactical overview is now filterable and can be safely put into the dashboard
- It is now possible to register new announcements over the REST Api
- Filtering for custom variables now works in UTF8 environments
* Ensuring you understand everything
- The monitoring health is now beautiful to look at and properly behaves in narrow environments
- Updated German localization
- Updated Italian localization
* Freeing you from unrealiable things
- Removed support for PHP < 5.6
- Removed support for persistent database connections
Patchnames: openSUSE-2020-67
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Affected products
Recommended
50 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
50 products, the same list as for
CVE-2018-18246
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
50 products, the same list as for
CVE-2018-18246
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
50 products, the same list as for
CVE-2018-18246
Threats
Impact
important
7.5 (High)
Affected products
Recommended
50 products, the same list as for
CVE-2018-18246
Threats
Impact
moderate
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for icingaweb2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for icingaweb2 to version 2.7.3 fixes the following issues:\n\nicingaweb2 update to 2.7.3:\n\n* Fixed an issue where servicegroups for roles with filtered objects \n were not available \n\nicingaweb2 update to 2.7.2:\n\n* Performance imrovements and bug fixes\n\nicingaweb2 update to 2.7.1:\n\n* Highlight links in the notes of an object \n* Fixed an issue where sort rules were no longer working\n* Fixed an issue where statistics were shown with an anarchist way\n* Fixed an issue where wildcards could no show results \n\nicingaweb2 update to 2.7.0:\n\n* New languages support\n* Now module developers got additional ways to customize Icinga Web 2\n* UI enhancements \n\nicingaweb2 update to 2.6.3:\n\n* Fixed various issues with LDAP\n* Fixed issues with timezone\n* UI enhancements \n* Stability fixes\n\nicingaweb2 update to 2.6.2:\n\nYou can find issues and features related to this release on our Roadmap.\nThis bugfix release addresses the following topics:\n\n* Database connections to MySQL 8 no longer fail\n* LDAP connections now have a timeout configuration which defaults to 5 seconds\n* User groups are now correctly loaded for externally authenticated users\n* Filters are respected for all links in the host and service group overviews\n* Fixed permission problems where host and service actions provided by modules were missing\n* Fixed an SQL error in the contact list view when filtering for host groups\n* Fixed time zone (DST) detection\n* Fixed the contact details view if restrictions are active\n* Doc parser and documentation fixes\n\nFix security issues:\n\n- CVE-2018-18246: fixed an CSRF in moduledisable (boo#1119784)\n- CVE-2018-18247: fixed an XSS via /icingaweb2/navigation/add (boo#1119785)\n- CVE-2018-18248: fixed an XSS attack is possible via query strings or a dir parameter (boo#1119801)\n- CVE-2018-18249: fixed an injection of PHP ini-file directives involves environment variables as channel to send out information (boo#1119799)\n- CVE-2018-18250: fixed parameters that can break navigation dashlets (boo#1119800)\n\n- Remove setuid from new upstream spec file for following dirs: \n\n /etc/icingaweb2,\n /etc/icingaweb/modules,\n /etc/icingaweb2/modules/setup,\n /etc/icingaweb2/modules/translation,\n /var/log/icingaweb2\n\nicingaweb2 updated to 2.6.1:\n\n- You can find issues and features related to this release on our \n [Roadmap](https://github.com/Icinga/icingaweb2/milestone/51?closed=1).\n- The command audit now logs a command\u0027s payload as JSON which fixes \n a [bug](https://github.com/Icinga/icingaweb2/issues/3535) \n that has been introduced in version 2.6.0.\n\nicingaweb2 was updated to 2.6.0:\n\n- You can find issues and features related to this release on our Roadmap.\n\n * Enabling you to do stuff you couldn\u0027t before\n - Support for PHP 7.2 added\n - Support for SQLite resources added\n - Login and Command (monitoring) auditing added with the help of a dedicated module\n - Pluginoutput rendering is now hookable by modules which allows to render custom icons, emojis and .. cute kitties :octocat:\n * Avoiding that you miss something\n - It\u0027s now possible to toggle between list- and grid-mode for the host- and servicegroup overviews\n - The servicegrid now supports to flip its axes which allows it to be put into a landscape mode\n - Contacts only associated with services are visible now when restricted based on host filters\n - Negated and combined membership filters now work as expected (#2934)\n - A more prominent error message in case the monitoring backend goes down\n - The filter editor doesn\u0027t get cleared anymore upon hitting Enter\n * Making your life a bit easier\n - The tactical overview is now filterable and can be safely put into the dashboard\n - It is now possible to register new announcements over the REST Api\n - Filtering for custom variables now works in UTF8 environments\n * Ensuring you understand everything\n - The monitoring health is now beautiful to look at and properly behaves in narrow environments\n - Updated German localization\n - Updated Italian localization\n * Freeing you from unrealiable things\n - Removed support for PHP \u003c 5.6\n - Removed support for persistent database connections\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-67",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0067-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:0067-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EYR3CRPR6ULC3DIQMEBEOTBJQVA76WI/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:0067-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EYR3CRPR6ULC3DIQMEBEOTBJQVA76WI/"
},
{
"category": "self",
"summary": "SUSE Bug 1101357",
"url": "https://bugzilla.suse.com/1101357"
},
{
"category": "self",
"summary": "SUSE Bug 1119784",
"url": "https://bugzilla.suse.com/1119784"
},
{
"category": "self",
"summary": "SUSE Bug 1119785",
"url": "https://bugzilla.suse.com/1119785"
},
{
"category": "self",
"summary": "SUSE Bug 1119799",
"url": "https://bugzilla.suse.com/1119799"
},
{
"category": "self",
"summary": "SUSE Bug 1119800",
"url": "https://bugzilla.suse.com/1119800"
},
{
"category": "self",
"summary": "SUSE Bug 1119801",
"url": "https://bugzilla.suse.com/1119801"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18246 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18247 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18247/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18248 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18248/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18249 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18249/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18250 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18250/"
}
],
"title": "Security update for icingaweb2",
"tracking": {
"current_release_date": "2026-09-20T19:02:29Z",
"generator": {
"date": "2020-01-16T15:12:13Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:0067-1",
"initial_release_date": "2020-01-16T15:12:13Z",
"revision_history": [
{
"date": "2020-01-16T15:12:13Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T19:02:29Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingacli@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:icinga:icinga_web_2:2.7.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/icingaweb2@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-common@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-vendor-HTMLPurifier@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-vendor-JShrink@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-vendor-Parsedown@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-vendor-dompdf@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-vendor-lessphp@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/icingaweb2-vendor-zf1@2.7.3-bp151.5.3.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"product": {
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"product_id": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-Icinga@2.7.3-bp151.5.3.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 12",
"product": {
"name": "SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Package Hub 15",
"product": {
"name": "SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15"
}
},
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP1",
"product": {
"name": "SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingacli-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingacli-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
},
"product_reference": "php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18246"
}
],
"notes": [
{
"category": "general",
"text": "Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18246",
"url": "https://www.suse.com/security/cve/CVE-2018-18246"
},
{
"category": "external",
"summary": "SUSE Bug 1119784 for CVE-2018-18246",
"url": "https://bugzilla.suse.com/1119784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-16T15:12:13Z",
"details": "moderate"
}
],
"title": "CVE-2018-18246"
},
{
"cve": "CVE-2018-18247",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18247"
}
],
"notes": [
{
"category": "general",
"text": "Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18247",
"url": "https://www.suse.com/security/cve/CVE-2018-18247"
},
{
"category": "external",
"summary": "SUSE Bug 1119785 for CVE-2018-18247",
"url": "https://bugzilla.suse.com/1119785"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-16T15:12:13Z",
"details": "low"
}
],
"title": "CVE-2018-18247"
},
{
"cve": "CVE-2018-18248",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18248"
}
],
"notes": [
{
"category": "general",
"text": "Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18248",
"url": "https://www.suse.com/security/cve/CVE-2018-18248"
},
{
"category": "external",
"summary": "SUSE Bug 1119801 for CVE-2018-18248",
"url": "https://bugzilla.suse.com/1119801"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-16T15:12:13Z",
"details": "moderate"
}
],
"title": "CVE-2018-18248"
},
{
"cve": "CVE-2018-18249",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18249"
}
],
"notes": [
{
"category": "general",
"text": "Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}_${APACHE_RUN_DIR}_${APACHE_RUN_USER} parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18249",
"url": "https://www.suse.com/security/cve/CVE-2018-18249"
},
{
"category": "external",
"summary": "SUSE Bug 1119799 for CVE-2018-18249",
"url": "https://bugzilla.suse.com/1119799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-16T15:12:13Z",
"details": "important"
}
],
"title": "CVE-2018-18249"
},
{
"cve": "CVE-2018-18250",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18250"
}
],
"notes": [
{
"category": "general",
"text": "Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single \u0027$\u0027 character as the Name of a Navigation item.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18250",
"url": "https://www.suse.com/security/cve/CVE-2018-18250"
},
{
"category": "external",
"summary": "SUSE Bug 1119800 for CVE-2018-18250",
"url": "https://bugzilla.suse.com/1119800"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 12:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15 SP1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"SUSE Package Hub 15:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.0:php-Icinga-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingacli-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-common-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-HTMLPurifier-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-JShrink-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-Parsedown-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-dompdf-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-lessphp-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:icingaweb2-vendor-zf1-0:2.7.3-bp151.5.3.1.noarch",
"openSUSE Leap 15.1:php-Icinga-0:2.7.3-bp151.5.3.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-16T15:12:13Z",
"details": "moderate"
}
],
"title": "CVE-2018-18250"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…