Lucene search

GoogleOSV:GHSA-2Q95-593F-G7H7

HistorySep 02, 2021 - 5:16 p.m.

OS Command Injection in Centreon

2021-09-0217:16:06

Google

osv.dev

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.1%

JSON

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

CPENameOperatorVersion
centreon/centreoneq19.04.17
centreon/centreoneq18.10.7
centreon/centreoneq19.04.4
centreon/centreoneq19.10.14
centreon/centreoneq19.10.13
centreon/centreoneq20.04.0-beta.1
centreon/centreoneq2.99.3
centreon/centreoneq19.10.17
centreon/centreoneq19.04.18
centreon/centreoneq19.10.22

Name	Operator	Version
centreon/centreon	eq	19.04.17
centreon/centreon	eq	18.10.7
centreon/centreon	eq	19.04.4
centreon/centreon	eq	19.10.14
centreon/centreon	eq	19.10.13
centreon/centreon	eq	20.04.0-beta.1
centreon/centreon	eq	2.99.3
centreon/centreon	eq	19.10.17
centreon/centreon	eq	19.04.18
centreon/centreon	eq	19.10.22

Rows per page:

1-10 of 621

References

engindemirbilek.github.io/centreon-19.10-rce

github.com/centreon/centreon

github.com/centreon/centreon/pull/8467#event-3163627607

nvd.nist.gov/vuln/detail/CVE-2020-22345

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.1%

JSON

Related for OSV:GHSA-2Q95-593F-G7H7