CVE-2019-17501

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Discovery screen). CVE-2019-17501 and CVE-2019-16405 are similar to one another and may be the same.
References
Link Resource
https://gist.github.com/sinfulz/ef49270e245df050af59cc3dd3eefa6b Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:centreon:centreon:19.04.0:*:*:*:*:*:*:*

Information

Published : 2019-10-13 19:15

Updated : 2019-12-18 08:15


NVD link : CVE-2019-17501

Mitre link : CVE-2019-17501


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

centreon

  • centreon