CVE-2022-42424

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to modify poller broker configuration. The issue results from the lack of...

CVE-2022-42428

CVE-2022-42428 affects Centreon (Centreon poller broker configuration handling). The root cause is improper validation of a user-supplied string used to construct SQL queries, enabling privilege escalation from normal user to administrator with network access and no user interaction. Authenticati...

CVE-2022-42429

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to modify poller broker configuration. The issue results from the lack of...

CVE-2022-42429

This CVE concerns Centreon. The vulnerability is a SQL injection in the poller broker configuration handling, caused by insufficient validation of a user-supplied string used to build SQL queries. It allows remote attackers to escalate privileges to administrator on affected Centreon installation...

CVE-2022-42424

CVE-2022-42424 describes a SQL injection in Centreon’s poller broker configuration handling that allows remote attackers to escalate privileges to administrator on affected installations. Root cause: lack of validation of a user-supplied string used to construct SQL queries. Impact: high (privile...

CVE-2022-42426

The CVE-2022-42426 entry concerns Centreon and describes a SQL injection in the poller broker configuration handling. The root cause is lack of proper validation of a user-supplied string before it is used to construct SQL queries, enabling remote authentication-enabled attackers to escalate priv...

CVE-2022-42425

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to modify poller broker configuration. The issue results from the lack of...

CVE-2022-42429

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to modify poller broker configuration. The issue results from the lack of...

CVE-2022-42426

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to modify poller broker configuration. The issue results from the lack of...

CVE-2022-41142

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

Design/Logic Flaw

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

Centreon SQL注入漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A security vulnerability exists in Centreon due to a failure to properly validate...

CVE-2022-41142

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

CVE-2022-41142

The CVE-2022-41142 vulnerability affects Centreon and is a SQL injection flaw in how poller resource configuration requests are processed. The root cause is insufficient validation of a user-supplied string used to construct SQL queries, enabling an attacker who can authenticate to escalate privi...

CVE-2022-41142

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

CVE-2022-41142

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

The vulnerability of Centreon’s software for monitoring IT infrastructure lies in the lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of Centreon’s IT infrastructure monitoring software relates to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

SQL Injection

centreon/centreon is vulnerable to SQL Injection attacks. A specifically crafted statement through the cgid parameter in formContactGroup.php, allows a remote authenticated attacker to inject and execute arbitrary SQL queries on the target system...

Centreon vulnerable to SQL Injection

A SQL injection vulnerability in Centreon affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cgid leads to sql injection. The attack can be initiated remotely. Version 22.10.0-beta1 contains a patch for this issue...

GHSA-J5WX-JVW3-J363 Centreon vulnerable to SQL Injection

A SQL injection vulnerability in Centreon affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cgid leads to sql injection. The attack can be initiated remotely. Version 22.10.0-beta1 contains a patch for this issue...