Design/Logic Flaw

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results from the lack of proper validation of a...

CVE-2022-34871

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results from the lack of proper validation of a...

CVE-2022-34871

CVE-2022-34871 is a SQL injection in Centreon’s poller resources. It requires authentication and allows an attacker to escalate privileges to administrator by abusing unsanitized user input used to build SQL queries. Root cause: lack of validation of a user-supplied string in poller configuration...