CVE-2024-45756

Centreon centreon-open-tickets is affected by a SQL injection in the form to create a ticket. Exploitation requires authenticated access with high privileges. Affected versions include 22.10.x–22.10.1, 23.04.x–23.04.2, 23.10.x–23.10.0, 24.04.x–24.04.1, and 24.10.x–24.09.x. Remediations per PT-202...

PT-2024-31751 · Centreon · Centreon-Dsm-Server

Name of the Vulnerable Software and Affected Versions: Centreon centreon-dsm-server versions 22.10.x through 22.10.2 Centreon centreon-dsm-server versions 23.04.x through 23.04.3 Centreon centreon-dsm-server versions 23.10.x through 23.10.1 Centreon centreon-dsm-server versions 24.04.x through...

CVE-2024-45755

Centreon DSM-server (centreon-dsm-server) suffers a SQL injection vulnerability in the form used to configure DSM slots. Affected versions include 22.10.x up to 22.10.0, 23.04.x up to 23.04.3, 23.10.x up to 23.10.1, 24.04.x up to 24.04.3, and 24.10.x up to 24.10.0. The issue is exploitable by aut...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-47863

An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, and 22.10.x before 22.10.26. A stored XSS was found in the user configuration contact name field. This form is only accessible to authenticated users with...

CVE-2024-47863

An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, and 22.10.x before 22.10.26. A stored XSS was found in the user configuration contact name field. This form is only accessible to authenticated users with...

CVE-2024-47863

An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, and 22.10.x before 22.10.26. A stored XSS was found in the user configuration contact name field. This form is only accessible to authenticated users with...

PT-2024-32855 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon Web versions 22.10.x through 22.10.25 Centreon Web versions 23.04.x through 23.04.22 Centreon Web versions 23.10.x through 23.10.17 Centreon Web versions 24.04.x through 24.04.7 Centreon Web versions 24.10.x through 24.09 Description...

Centreon Web 安全漏洞

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon Web version 24.10 and earlier versions. An attacker...

CVE-2024-47863

CVE-2024-47863 affects Centreon Web with a stored XSS in the user configuration contact name field. This form is accessible only to authenticated users with high-privilege access. Affected versions include Centreon Web 22.10.x up to 22.10.26 (22.10.26 fixed), 23.04.x up to 23.04.23, 23.10.x up to...

CVE-2024-47863

An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, and 22.10.x before 22.10.26. A stored XSS was found in the user configuration contact name field. This form is only accessible to authenticated users with...

Centreon updateContactServiceCommands_MC SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateContactServiceCommandsMC function. The issue results from the lack of proper validation of a...

Centreon updateContactHostCommands_MC SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateContactHostCommandsMC function. The issue results from the lack of proper validation of a...

Centreon updateAccessGroupLinks_MC SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateAccessGroupLinksMC function. The issue results from the lack of proper validation of a...

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to enhance their privileges and execute arbitrary code.

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to enhance their privileges and execute arbitrary code.

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...

Centreon BI Server 安全漏洞

Centreon BI Server is an IT monitoring platform from Centreon. A security vulnerability exists in versions of Centreon BI Server prior to 24.04.3, which stems from improper handling of inputs when configuring a list of reporting tasks and is vulnerable to SQL injection attacks...

CVE-2024-45754

An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to...