PT-2020-10386
CVE-2019-20327
·
تاريخ النشر
2020-01-16
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Centreon Infrastructure Monitoring Software versions prior to 20.04
Description
The issue concerns insecure permissions in the cwrapper perl component of Centreon Infrastructure Monitoring Software. This component is a setuid executable that allows the execution of Perl scripts with root privileges, potentially enabling local attackers to gain elevated privileges.
Recommendations
For Centreon Infrastructure Monitoring Software versions prior to 20.04, update to version 20.04 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾