GitHub Advisoryadvisory · Packagist

GHSA-2q95-593f-g7h7 OS Command Injection in Centreon

HIGH Published 2021-09-02 Modified 2021-08-26 Official page ↗
Aliases
CVE-2020-22345
Ecosystem
Packagist
Packages
centreon/centreon
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Reviewed
2021-08-26

Affected packages

• Packagist centreon/centreon: < 20.04.0 → fixed in 20.04.0

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

Related

Alias · CVE (1)

  • CVE-2020-22345 /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters… vulnerability

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References