Lucene search

K
cve[email protected]CVE-2011-4431
HistoryNov 10, 2011 - 12:55 a.m.

CVE-2011-4431

2011-11-1000:55:00
CWE-22
web.nvd.nist.gov
21
cve-2011-4431
directory traversal
merethis centreon
security vulnerability
remote code execution
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a … (dot dot) in the command_name parameter.

Affected configurations

NVD
Node
merethiscentreonRange≀2.3.1
OR
merethiscentreonMatch1.4
OR
merethiscentreonMatch1.4.1
OR
merethiscentreonMatch1.4.2
OR
merethiscentreonMatch1.4.2.1
OR
merethiscentreonMatch1.4.2.2
OR
merethiscentreonMatch1.4.2.3
OR
merethiscentreonMatch1.4.2.4
OR
merethiscentreonMatch1.4.2.5
OR
merethiscentreonMatch1.4.2.6
OR
merethiscentreonMatch1.4.2.7
OR
merethiscentreonMatch2.0b2
OR
merethiscentreonMatch2.0b3
OR
merethiscentreonMatch2.0b4
OR
merethiscentreonMatch2.0b5
OR
merethiscentreonMatch2.0b6
OR
merethiscentreonMatch2.0rc1
OR
merethiscentreonMatch2.0rc2
OR
merethiscentreonMatch2.0rc3
OR
merethiscentreonMatch2.0rc4
OR
merethiscentreonMatch2.0rc5
OR
merethiscentreonMatch2.0.1
OR
merethiscentreonMatch2.0.2
OR
merethiscentreonMatch2.1.0
OR
merethiscentreonMatch2.1.1
OR
merethiscentreonMatch2.1.2
OR
merethiscentreonMatch2.1.3
OR
merethiscentreonMatch2.1.4
OR
merethiscentreonMatch2.1.5
OR
merethiscentreonMatch2.1.6
OR
merethiscentreonMatch2.1.7
OR
merethiscentreonMatch2.1.8
OR
merethiscentreonMatch2.1.9
OR
merethiscentreonMatch2.1.10
OR
merethiscentreonMatch2.1.11
OR
merethiscentreonMatch2.1.12
OR
merethiscentreonMatch2.1.13
OR
merethiscentreonMatch2.2
OR
merethiscentreonMatch2.2b1
OR
merethiscentreonMatch2.2rc1
OR
merethiscentreonMatch2.2rc2
OR
merethiscentreonMatch2.2.1
OR
merethiscentreonMatch2.2.2
OR
merethiscentreonMatch2.3.0
OR
merethiscentreonMatch2.3.0rc3

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

Related for CVE-2011-4431