[Bug 1119799] VUL-1: CVE-2018-18249: icingaweb2: injection of PHP ini-file directives involves environment variables as channel to send out information