CVE-2021-28055

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user...

CVE-2021-28055

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user...

CVE-2021-28055

CVE-2021-28055 : Multiple sources report a vulnerability in Centreon-Web (Centreon Platform 20.10.0) where the anti-CSRF token generation is predictable, which could allow CSRF attacks to add an admin user. This is the explicit root cause across Red Hat, GitHub advisories, CNVD/CNNVD, OSV, and NV...

Centreon Web 跨站请求伪造漏洞

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A cross-site request forgery vulnerability exists in Centreon-Web in Centreon Platform version 20.10...

Centreon Web Authorization Issues Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . Centreon Web has an authorization issue vulnerability that can be exploited by attackers to bypass...

CVE-2019-15299

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contactautologinkey field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication...

CVE-2019-15299

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contactautologinkey field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication...

Authentication flaw

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contactautologinkey field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication...

CVE-2019-15299

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contactautologinkey field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication...

CVE-2019-15299

Centreon Web (up to version 19.04.3) contains an authentication bypass issue: after a user changes their password on their profile page, the contact_autologin_key field in the database is set to blank instead of NULL. This behavior enables partial bypass of authentication. The available connected...

Centreon Code Issues Vulnerabilities

Centreon Web is a set of open source system monitoring tools from France's Centreon. The product mainly provides monitoring functions for resources such as network, system and application programs. A code issue exists in the licenseUpload.php file in versions of Centreon Web prior to 2.8.27. An...

Centreon Web SQL Injection Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A SQL injection vulnerability exists in Centreon Web. The vulnerability stems from a lack of...

Centreon Web Command Injection Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A command injection vulnerability exists in the...

CVE-2019-15300

A problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in the page include/Administration/parameters/ldap/xml/ldaphost.php. The arId parameter is not properly filtered before being passed to the SQL query...

CVE-2019-15298

A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configObject/traps-mibs/formMibs.php. This page is called from the Centreon administration interface. This is the mibs management feature that contains a file filin...

Command injection

A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configObject/traps-mibs/formMibs.php. This page is called from the Centreon administration interface. This is the mibs management feature that contains a file filin...

CVE-2019-15298

A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configObject/traps-mibs/formMibs.php. This page is called from the Centreon administration interface. This is the mibs management feature that contains a file filin...

CVE-2019-15298

Centreon Web (version 19.04.3 and earlier) is affected by an authenticated command injection in include/configuration/configObject/traps-mibs/formMibs.php. The mnftr parameter is not properly filtered when submitting a file via the mibs management form, allowing injected Linux commands to be exec...

CVE-2019-15300

A problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in the page include/Administration/parameters/ldap/xml/ldaphost.php. The arId parameter is not properly filtered before being passed to the SQL query...

CVE-2019-15300

The CVE-2019-15300 issue affects Centreon Web up to version 19.04.3. It is an authenticated SQL injection vulnerability in the page include/Administration/parameters/ldap/xml/ldap_host.php, where the arId parameter is not properly filtered before being concatenated into the SQL query. This leads ...