PT-2021-10758
CVE-2020-22345
·
تاريخ النشر
2021-08-18
·
تاريخ التحديث
2021-09-02
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Centreon version 19.10.8
Description
The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the
RRDdatabase path parameter in the /graphStatus/displayServiceStatus.php endpoint.Recommendations
For Centreon version 19.10.8, consider restricting access to the
/graphStatus/displayServiceStatus.php endpoint to minimize the risk of exploitation, and avoid using shell metacharacters in the RRDdatabase path parameter until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾