What’s Vulnerable › Vulnerabilities

CVE-2020-29663

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-15 · updated 2026-06-17
• Weakness: CWE-295

Description

Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.

Affected products

• icinga2: from 2.8.0 through 2.11.7; 2.12.2

References

• https://github.com/Icinga/icinga2/compare/v2.12.1...v2.12.2
• https://github.com/Icinga/icinga2/security/advisories/GHSA-pcmr-2p2f-r7j6
• https://github.com/Icinga/icinga2/compare/v2.12.1...v2.12.2
• https://github.com/Icinga/icinga2/security/advisories/GHSA-pcmr-2p2f-r7j6

Get alerted when CVE-2020-29663 or the next vulnerability affects your stack