Critical · 9.8 CVE-2018-21025 EUVD-2022-3667GHSA-f24j-f97w-65h8

Centreon Privilege Escalation

Published Oct 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: centreon/centreon Ecosystem: Packagist

Description

In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	centreon/centreon	<= 19.04.3	—	GHSA-f24j-f97w-65h8

References

https://github.com/centreon/centreon/issues/7082
https://www.openwall.com/lists/oss-security/2019/10/08/1
[oss-security] 20191009 Re: Multiple vulnerabilities in Centreon-Web and Centreon-VM mailing-list