Lucene search

GitHub Advisory DatabaseGHSA-C8QC-CP8V-PRPX

HistoryMay 14, 2022 - 3:02 a.m.

Centreon RCE Vulnerability

2022-05-1403:02:59

CWE-94

GitHub Advisory Database

github.com

centreon

vulnerability

remote code execution

software

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.053

Percentile

93.1%

JSON

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.

Affected configurations

Vulners

Node

centreoncentreonMatch2.8.23

centreoncentreonMatch3.4.6

VendorProductVersionCPE
centreoncentreon2.8.23cpe:2.3:a:centreon:centreon:2.8.23:*:*:*:*:*:*:*
centreoncentreon3.4.6cpe:2.3:a:centreon:centreon:3.4.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
centreon	centreon	2.8.23	cpe:2.3:a:centreon:centreon:2.8.23:::::::*
centreon	centreon	3.4.6	cpe:2.3:a:centreon:centreon:3.4.6:::::::*

References

documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html

github.com/advisories/GHSA-c8qc-cp8v-prpx

github.com/centreon/centreon-archived/pull/6263

github.com/centreon/centreon-archived/pull/6263/commits/fb438e6aaf133cc5f9d25130653ba8fdc6ecf51f

nvd.nist.gov/vuln/detail/CVE-2018-11587

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.053

Percentile

93.1%

JSON

Related for GHSA-C8QC-CP8V-PRPX