Directory traversal

2011-11-1000:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.5%

JSON

Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a … (dot dot) in the command_name parameter.

CPENameOperatorVersion
centreoneq2.1.7
centreoneq2.3.0 rc3
centreoneq2.1.9
centreoneq2.0 rc5
centreoneq1.4.2.4
centreoneq1.4.2.1
centreoneq1.4.2.5
centreoneq2.2 rc1
centreoneq2.2 rc2
centreoneq2.1.3

Name	Operator	Version
centreon	eq	2.1.7
centreon	eq	2.3.0 rc3
centreon	eq	2.1.9
centreon	eq	2.0 rc5
centreon	eq	1.4.2.4
centreon	eq	1.4.2.1
centreon	eq	1.4.2.5
centreon	eq	2.2 rc1
centreon	eq	2.2 rc2
centreon	eq	2.1.3