CVE-2012-3441 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.