Skip to content
OpenAdvisories

Package · Packagist

centreon/centreon

27 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.8

    Centreon Privilege Escalation

    In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.

  • Critical 9.8

    SQL injection in Centreon

    SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.

  • Critical 9.8

    Centreon allows SNMP trap SQL Injection

    Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.27) allows SNMP trap SQL Injection.

  • Critical 9.8

    Centreon RCE Vulnerability

    There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.