GitHub Advisoryadvisory · Packagist

GHSA-4f26-v6fr-9hmp Improper Input Validation in Centreon Web

HIGH Published 2021-07-28 Modified 2022-04-01 Official page ↗
Aliases
CVE-2019-16405
Ecosystem
Packagist
Packages
centreon/centreon
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2021-07-27

Affected packages

• Packagist centreon/centreon: < 18.10.8 → fixed in 18.10.8 • Packagist centreon/centreon: >= 19.0.0, < 19.04.5 → fixed in 19.04.5

Description

Centreon Web 19.04.4 allows Remote Code Execution by an administrator who can modify Macro Expression location settings.

Related

Alias · CVE (1)

  • CVE-2019-16405 Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References