PT-2020-10386
CVE-2019-20327
·
Published
2020-01-16
·
Updated
2021-07-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Centreon Infrastructure Monitoring Software versions prior to 20.04
Description
The issue concerns insecure permissions in the cwrapper perl component of Centreon Infrastructure Monitoring Software. This component is a setuid executable that allows the execution of Perl scripts with root privileges, potentially enabling local attackers to gain elevated privileges.
Recommendations
For Centreon Infrastructure Monitoring Software versions prior to 20.04, update to version 20.04 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾