PT-2024-31753 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon centreon-bam versions 22.10 through 24.04 Description: A problem was discovered in the user-settings form of Centreon centreon-bam, where SQL injection can occur. The exploitation of this issue is only accessible to authenticated use...

CVE-2024-45757

A SQL injection vulnerability exists in the user-settings form of Centreon centreon-bam versions 22.10, 23.04, 23.10, and 24.04 . Exploitation requires authenticated access with high-privileged privileges . To mitigate this risk, it is recommended to restrict access to the user-settings form, lim...

UBUNTU-CVE-2024-36464

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45756

A SQL injection vulnerability exists in the Centreon centreon-open-tickets component. The flaw is triggered during the creation of a ticket and is only exploitable by authenticated users with high-privileged access . Affected versions include 24.10.x before 24.10.0 , 24.04.x before 24.04.2 , 23.1...

CVE-2024-45756: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to create a ticket. Exploitation is only accessible to authenticated users with...

CVE-2024-45756

An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to create a ticket. Exploitation is only accessible to authenticated users with...

CVE-2024-45755

A SQL injection vulnerability exists in Centreon centreon-dsm-server affecting versions 24.10.x before 24.10.0 , 24.04.x before 24.04.3 , 23.10.x before 23.10.1 , 23.04.x before 23.04.3 , and 22.10.x before 22.10.2 . The root cause is the improper neutralization of special elements used in an SQL...

10 Most Impactful PAM Use Cases for Enhancing Organizational Security

Privileged access management PAM plays a pivotal role in building a strong security strategy. PAM empowers you to significantly reduce cybersecurity risks, gain tighter control over privileged access, achieve regulatory compliance, and reduce the burden on your IT team. As an established provider...

CVE-2024-9875

Okta Privileged Access server agent SFTD versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent SFTD to version 1.87.1 or greater...

Okta Privileged Access 输入验证错误漏洞

Okta Privileged Access is a privileged access management solution from Okta USA. An input validation error vulnerability exists in Okta Privileged Access server agent SFTD versions 1.82.0 through 1.84.0, which stems from an elevation of privilege issue when the sudo command packet feature is...

CVE-2024-9875: Improper Input Validation

Okta Privileged Access server agent SFTD versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent SFTD to version 1.87.1 or greater...

CVE-2024-9875

Okta Privileged Access server agent (SFTD) versions 1.82.0–1.84.0 are affected by a privilege-escalation vulnerability when the sudo command bundles feature is enabled. The root cause is an elevation of privilege within the sudo-bundles path, allowing local attackers to gain higher privileges. Re...

CVE-2024-9875

Okta Privileged Access server agent SFTD versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent SFTD to version 1.87.1 or greater...

CVE-2024-9875

Okta Privileged Access server agent SFTD versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent SFTD to version 1.87.1 or greater...

PT-2024-39905

Name of the Vulnerable Software and Affected Versions Okta Privileged Access server agent SFTD versions 1.82.0 through 1.84.0 Description The issue is related to a privilege escalation vulnerability when the sudo command bundles feature is enabled. Recommendations For Okta Privileged Access serve...

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Privileged accounts are well-known gateways for potential security threats. However, many organizations focus solely on managing privileged access—rather than securing the accounts and users entrusted with it. This emphasis is perhaps due to the persistent challenges of Privileged Access Manageme...