CVE-2019-17501

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Discovery screen). CVE-2019-17501 and CVE-2019-16405 are similar to one another and may be the same.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-10-14

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Centreon (Centreon)

References

• https://gist.github.com/sinfulz/ef49270e245df050af59cc3dd3eefa6b