CVE catalog
CVE-2025-53840
icingadb-web affected and fixed versions
Icinga DB Web provides a graphical interface for Icinga monitoring. Starting in version 1.2.0 and prior to version 1.2.2, users with access to Icinga Dependency Views, are allowed to see hosts and services that they weren't meant to on the dependency map. However, the name of an object will not be revealed nor does this grant access to a host's or service's detail view. Please note that this only affects the restrictions `filter/hosts` and `filter/services`. `filter/objects` is not affected by this and restricts objects as it is supposed to. Version 1.2.2 applies these restrictions properly. As a workaround, one may downgrade to version 1.1.3.
- Severity
- Low
- Source
- [NVD] · [CVE record]
- EPSS
- 0.30% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "icingadb-web",
"status": "not affected",
"release": "sid",
"version": "1.4.0-1"
},
{
"name": "icingadb-web",
"status": "not affected",
"release": "forky",
"version": "1.4.0-1"
},
{
"name": "icingadb-web",
"status": "not affected",
"release": "trixie",
"version": "1.1.3-1"
},
{
"name": "icingadb-web",
"status": "not affected",
"release": "bookworm",
"version": "1.0.2-1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "icingadb-web",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "unimportant",
"fixed_version": "0"
},
{
"bug": null,
"name": "icingadb-web",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "unimportant",
"fixed_version": "0"
},
{
"bug": null,
"name": "icingadb-web",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "unimportant",
"fixed_version": "0"
},
{
"bug": null,
"name": "icingadb-web",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "unimportant",
"fixed_version": "0"
}
],
"distribution_packages": []
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.