PT-2007-7319
CVE-2007-6485
·
تاريخ النشر
2007-12-20
·
تاريخ التحديث
2018-10-15
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Centreon version 1.4.1
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
fileOreonConf parameter to (1) "MakeXML.php" or (2) "MakeXML4statusCounter.php" in include/monitoring/engine/.Recommendations
For Centreon version 1.4.1, consider restricting access to the
MakeXML.php and MakeXML4statusCounter.php files in the include/monitoring/engine/ directory to minimize the risk of exploitation. Avoid using the fileOreonConf parameter in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾