Lucene search
PRIOn knowledge basePRION:CVE-2022-41142HistoryJan 26, 2023 - 6:59 p.m.
Design/Logic Flaw
2023-01-2618:59:00
PRIOn knowledge base
www.prio-n.com
3
centreon
privilege escalation
sql injection
authentication
0.002 Low
EPSS
Percentile
54.1%
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-18304.
Related
cve
cve
CVE-2022-41142
2023-01-26 18:59:53
nvd
nvd
CVE-2022-41142
2023-01-26 18:59:53
osv
osv
CVE-2022-41142
2023-01-26 18:59:53
cvelist
cvelist
CVE-2022-41142
2023-01-26 00:00:00
zdi
zdi
Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability
2022-10-03 00:00:00