Remote Code Execution.

2019-10-0905:25:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

66.0%

Centreon Web is vulnerable to remote code execution (RCE). The attacker can inject malicious code through ns_id parameter in getStats.php.

CPENameOperatorVersion
centreon/centreonle2.8.x-dev

CPE	Name	Operator	Version
	centreon/centreon	le	2.8.x-dev

References

www.openwall.com/lists/oss-security/2019/10/09/2

github.com/centreon/centreon/commit/019249fdd36802c7ce9030bb0262da78c59276cd

github.com/centreon/centreon/pull/7083

github.com/centreon/centreon/pull/7271

www.openwall.com/lists/oss-security/2019/10/08/1

0.003 Low

EPSS

Percentile

66.0%

Related for VERACODE:21663