CVE-2022-24716
Path traversal in Icinga Web 2
- Published
- Mar 8, 2022
- Updated
- Apr 23, 2025
- Assigning CNA
- GitHub_M
- Evidence observed
- Apr 8, 2023
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NHigh · next 30 days
- Percentile
- 99.8%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.
Sources
modules/auxiliary/scanner/http/icinga_static_library_file_directory_traversal.rb
Metasploit Framework modulesDeclared conditions
- verification: check_declared($.auxiliary_scanner/http/icinga_static_library_file_directory_traversal.check)
http/cves/2022/CVE-2022-24716.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: regex,status,word($.matchers[*].type)
- CVE-2022-24716Exploit
Arbitrary File Disclosure Vulnerability in Icinga Web 2 <2.8.6, <2.9.6, <2.10
- CVE-2022-24716-2Exploit
CVE-2022-24716 (Arbitrary File Disclosure Icingaweb2)
- CVE-2022-24716Exploit
Python exploit for CVE-2022-24716: arbitrary file disclosure in Icinga Web 2 versions <2.8.6, <2.9.6, <2.10. Usage: python3 exploit.py -u <url> -f <file_path>.
- CVE-2022-24716Exploit
Arbitrary File Disclosure Vulnerability in Icinga Web 2 <2.8.6, <2.9.6, <2.10
- CVE-2022-24716Exploit
Exploit for CVE-2022-24716 in Icinga Web 2, allowing unauthenticated file disclosure of configuration files containing database credentials.
Jacob Ebben · php · Apr 8, 2023
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.