icon

We found results for “

CVE-2019-15298

Good to know:

icon

Date: November 27, 2019

A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configObject/traps-mibs/formMibs.php. This page is called from the Centreon administration interface. This is the mibs management feature that contains a file filing form. At the time of submission of a file, the mnftr parameter is sent to the page and is not filtered properly. This allows one to inject Linux commands directly.

Language: PHP

Severity Score

Severity Score

Weakness Type (CWE)

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-74

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-78

Top Fix

icon

Upgrade Version

Upgrade to version centreon/centreon - dev-MON-5812-handle-unit;centreon/centreon - dev-dependabot/composer/symfony/yaml-5.4.3;centreon/centreon - dev-MON-12496-add-new-column;centreon/centreon - dev-DEVOPS-313-D;centreon/centreon - dev-MON-14869-firefox-22.04;centreon/centreon - dev-MON-fix-2-8-job;centreon/centreon - dev-test-fix-debian;centreon/centreon - dev-upgrade-21.04.0-beta.2;centreon/centreon - dev-MON-11445-specify-scope-and-externals;centreon/centreon - dev-upgrade-to-20.04.8;centreon/centreon - dev-fix-build-21.04.x;centreon/centreon - dev-MON-14412;centreon/centreon - dev-MON-14359-use-api-to-select-metrics-dev-22.04.x;centreon/centreon - dev-develop-to-master;centreon/centreon - dev-MON-7341-fail-on-error;centreon/centreon - dev-MON-6965-remove-orphan-menus;centreon/centreon - dev-MON-14970-sanitize-and-bind-host-category-listing-for-2110;centreon/centreon - dev-retrieve-bam-files;centreon/centreon - dev-MON-12595-contact-template-search-filter;centreon/centreon - dev-reintroduce-api-e2e-tests;centreon/centreon - dev-fix-openid-configuration;centreon/centreon - dev-MON-12374;centreon/centreon - dev-MON-11780-first-step-detail-service;centreon/centreon - dev-MON-13318-help-issue;centreon/centreon - dev-MON-15400;centreon/centreon - dev-realign-front-master;centreon/centreon - dev-upgrade-to-21.10.4;centreon/centreon - dev-MON-5851-2.8.x;centreon/centreon - dev-MON-15253;centreon/centreon - dev-MON-12075;centreon/centreon - dev-MON-7156;centreon/centreon - dev-MON-6880-units-are-not-properly-displayed;centreon/centreon - dev-MON-12597;centreon/centreon - dev-MON-13020;centreon/centreon - dev-unattended-for-21.04-for-pr;centreon/centreon - dev-Re-import-translation-for-button-export-in-one-click;centreon/centreon - dev-MON-5812-parameters-endpoint;centreon/centreon - dev-fix-centreon-frontend-breaking-changes;centreon/centreon - dev-move-platformjsongraph;centreon/centreon - dev-MON-12228-users;centreon/centreon - dev-MON-14961-sanitize-and-bind-calpi-centreon-service-class-for-2110;centreon/centreon - dev-sonar-qg;centreon/centreon - dev-MON-11904-js-effects;centreon/centreon - dev-MON-13385-backend-host-category-endpoint;centreon/centreon - dev-MON-14387-debian-11-cant-save-modifications-in-administration-parameters-monitoring;centreon/centreon - dev-MON-3201;centreon/centreon - dev-dependabot/composer/guzzlehttp/guzzle-7.4.3;centreon/centreon - dev-dependabot/npm_and_yarn/lighthouse/jpeg-js-0.4.4;centreon/centreon - dev-cypress-io-first-impl;centreon/centreon - dev-MON-14007-mbi-widgets-are-not-readable-in-dark-mode;centreon/centreon - dev-release-20.10.11;centreon/centreon - dev-resync-21.10;centreon/centreon - dev-add_apache_group;centreon/centreon - dev-MON-7324-ldap-groups-not-listed-in-shared-views;centreon/centreon - dev-MON-14666-sanitize-sevicegroup-dependencies-queries-dev-21.04.x;centreon/centreon - dev-MON-14496-22.04.x;centreon/centreon - dev-MON-12218;centreon/centreon - dev-prepare-19.10.20-rn;centreon/centreon - dev-MON-6883-add-default-log_directory;centreon/centreon - dev-MON-14039-21.10.x;centreon/centreon - dev-MON-13050-tags;centreon/centreon - dev-disable-centos8-builds-dev-21.04.x;centreon/centreon - dev-MON-14019-dev-22.04.X;centreon/centreon - dev-MON-12296-doc;centreon/centreon - dev-MON-12488-migration;centreon/centreon - dev-dependabot/npm_and_yarn/i18next-21.1.0;centreon/centreon - dev-upgrade-to-21.10.6;centreon/centreon - dev-MON-6897;centreon/centreon - dev-upgrade-to-21.04.2;centreon/centreon - dev-MON-3810-remove-unused-appkey-for-remote-server-22.04.x;centreon/centreon - dev-MON-10921-curves;centreon/centreon - dev-refacto-security-arch;centreon/centreon - dev-testTemp;centreon/centreon - dev-MON-12738-refacto;centreon/centreon - dev-unattended-with-latest-release-version;centreon/centreon - dev-dependabot/npm_and_yarn/i18next-21.2.4;centreon/centreon - dev-MON-10927-revert-dev-20.10.x;centreon/centreon - dev-MON-13307;centreon/centreon - dev-MON-11993;centreon/centreon - dev-MON-13372-In-French-text-that-overflows-when-on-three-lines;centreon/centreon - dev-dependabot/npm_and_yarn/axios-0.25.0;centreon/centreon - dev-MON-11073-Fix-colors-for-host-status-unreachable;centreon/centreon - dev-MON-14964-sanitize-and-bind-service-by-hostgroups-listing-for-2110;centreon/centreon - dev-test-sq;centreon/centreon - dev-MON-10786-redirect-top-counter-to-status-detail-pages;centreon/centreon - dev-MON-15009-create-authentication-denied-page;centreon/centreon - dev-MON-6860-redirect-to-parent-resource-when-clicked;centreon/centreon - dev-MON-21601-put-new-parameters;centreon/centreon - dev-MON-6491-router;centreon/centreon - dev-MON-11780;centreon/centreon - dev-MON-6573-jquery-upgrade-fix-security-before-master;centreon/centreon - dev-MON-10695-remove-dead-code-21.04.x;centreon/centreon - dev-MON-12748;centreon/centreon - dev-release-20.10.10;centreon/centreon - dev-MON-13785-access-group-second-select-not-working;centreon/centreon - dev-MON-15124-impossible-to-see-jobs/reports-websso-user;centreon/centreon - dev-MON-6251-Activation-popup-warning-in-modalDetails;centreon/centreon - dev-MON-12647-put-websso-config-interfaces;centreon/centreon - dev-newHeader;centreon/centreon - dev-MON-12400-password-regression;centreon/centreon - dev-MON-4253-check-expired-session;centreon/centreon - dev-MON-14960-sanitize-bind-service-listing-21.10.x;centreon/centreon - dev-SECU-243-clear-SQ-logs;centreon/centreon - dev-fix_post_debian;centreon/centreon - dev-update-jenkinsfile;centreon/centreon - dev-MON-6617-meitrcs-acl;centreon/centreon - dev-fix-acceptance-tests;centreon/centreon - dev-MON-11656;centreon/centreon - dev-dependabot/npm_and_yarn/centreon/centreon-frontend-e1f40b1;centreon/centreon - dev-fix-utc-format;centreon/centreon - dev-SECU-34;centreon/centreon - dev-MON-15384-autologin;centreon/centreon - dev-release-20.10.13;centreon/centreon - dev-doc-api-22.10;centreon/centreon - dev-MON-11964;centreon/centreon - dev-MON-14325;centreon/centreon - dev-MON-12481;centreon/centreon - dev-fix-missing-alma8-bundle;centreon/centreon - dev-MON-12289-expiration;centreon/centreon - dev-MON-12512-fix-kb-vulnerability;centreon/centreon - dev-upgrade-to-21.10.0-beta.2;centreon/centreon - dev-MON-12056-dev-21.10.x;centreon/centreon - dev-MON-12040-exclude-users;centreon/centreon - dev-MON-7222-php-warning-when-editing-a-service-with-no-macro;centreon/centreon - dev-centreond;centreon/centreon - dev-MON-7020-bis;centreon/centreon - dev-prepare-2.8.38-rn;centreon/centreon - dev-upgrade-to-19.10.20;centreon/centreon - dev-20.04-php73-compatibility;centreon/centreon - dev-MON-12296-rename-method;centreon/centreon - dev-MON-14359-test;centreon/centreon - dev-SECU-807-remove-old-policy-files;centreon/centreon - dev-MON-7015-tooltip-options-are-not-updated-directly;centreon/centreon - dev-fix-reference-build;centreon/centreon - dev-update-to-19.10.22;centreon/centreon - dev-MON-6459-fix-export-conf-when-contact-notifications-are-disabled;centreon/centreon - dev-add_group;centreon/centreon - dev-MON-12668-update-switch-theme-mode;centreon/centreon - dev-release-22.04.1;centreon/centreon - dev-MON-7121-switch-resources-loader;centreon/centreon - dev-MON-10832-hide-macro-password;centreon/centreon - dev-MON-12029-Manage-Header-and-Footer;centreon/centreon - dev-MON-14257-sanitize-acl-service-dependency-dev-21.04.x;centreon/centreon - dev-MON-12951-incorrect-expiration-message;centreon/centreon - dev-failed-installation-due-to-debug;centreon/centreon - dev-release-21.04.4;centreon/centreon - dev-MON-13013-add-missing-translations;centreon/centreon - dev-dependabot/composer/symfony/yaml-5.3.6;centreon/centreon - dev-change_snmpd;centreon/centreon - dev-dependabot/npm_and_yarn/html-react-parser-1.4.8;centreon/centreon - dev-MON-14924-sanitize-and-bind-templates-of-service-listing-for-2110;centreon/centreon - 2.4.0;centreon/centreon - dev-MON-13310;centreon/centreon - dev-contact-theme;centreon/centreon - dev-about-new-developer;centreon/centreon - dev-MON-14957-sanitize-bind-LDAP-clapi-listing-21.10.x;centreon/centreon - dev-MON-7304;centreon/centreon - dev-MON-14263-hotfix;centreon/centreon - dev-MON-4800-pollers;centreon/centreon - dev-MON-14870-fixes;centreon/centreon - dev-MON-7059-wrong-legend-name-in-graph;centreon/centreon - dev-MON-7161-remove-deprecated-notification-on-entry-menu;centreon/centreon - dev-MON-6479;centreon/centreon - dev-MON-12269-add-hostId-serviceId-to-listing;centreon/centreon - dev-MON-10977;centreon/centreon - dev-MON-11397-fix;centreon/centreon - dev-MON-5485-validation-failed;centreon/centreon - dev-MON-11776-application;centreon/centreon - dev-MON-12198-improve-sql-queries-by-escaping;centreon/centreon - dev-MON-11732;centreon/centreon - dev-hotfix-MON-15318-update-sql-errors-during-minors-update;centreon/centreon - dev-MON-10790-22.04.x;centreon/centreon - dev-prepare-web-19.0.22-rn;centreon/centreon - dev-fix_MON-14976_update_twig_error_configuration_file_path;centreon/centreon - dev-MON-5789-gorgone-post-command;centreon/centreon - dev-MON-11463-poller;centreon/centreon - dev-MON-14922-sanitize-bind-meta-service-config;centreon/centreon - dev-upgrade-to-20.04.20;centreon/centreon - dev-MON-7093;centreon/centreon - dev-MON-7177-host-graphs-are-positioned-in-a-mess;centreon/centreon - dev-MON-13277;centreon/centreon - dev-psr12-coding-style;centreon/centreon - dev-RL-70-mock-fake-user-story;centreon/centreon - dev-MON-12744-use-clsx;centreon/centreon - dev-revert-10602-MON-12083-Remove-the-tooltips-on-hover-for-urls;centreon/centreon - dev-MON-14893;centreon/centreon - dev-MON-7179-warning-when-adding-a-new-host;centreon/centreon - dev-MON-14999;centreon/centreon - dev-MON-12669;centreon/centreon - dev-MON-12357-fix-timezones;centreon/centreon - dev-MON-12828-dev-21.10.x-bis;centreon/centreon - dev-MON-3593;centreon/centreon - dev-MON-notification-undefined-centreon;centreon/centreon - dev-MON-11353-editing-filter-with-dynamic-criterias;centreon/centreon - dev-MON-14848;centreon/centreon - dev-MON-14879-qa-fixes;centreon/centreon - dev-master-to-develop;centreon/centreon - dev-MON-12842-gorgone-user;centreon/centreon - dev-dependabot/npm_and_yarn/tests/e2e/loader-utils-1.4.2;centreon/centreon - dev-MON-7083;centreon/centreon - dev-upgrade-to-21.04.13;centreon/centreon - dev-MON-6451-update;centreon/centreon - dev-remove-sleep-from-jenkins;centreon/centreon - dev-MON-6467;centreon/centreon - dev-MON-11235-cannot-display-more-in-status-tile;centreon/centreon - dev-MON-15182-redirection-rework;centreon/centreon - dev-MON-15169-cannot-export-csv-images-multiple-period-graphs;centreon/centreon - dev-MON-11978-poc-module-federation;centreon/centreon - 2.7.4;centreon/centreon - dev-dependabot/composer/smarty/smarty-4.0.4;centreon/centreon - dev-upgrade-to-20.10.14;centreon/centreon - dev-MON-13244;centreon/centreon - dev-MON-11203-non-shared-statementcollector;centreon/centreon - dev-MON-14039;centreon/centreon - dev-MON-12438-first-ldap-autoimport-does-not-work;centreon/centreon - dev-dependabot/composer/friendsofsymfony/rest-bundle-3.2.1;centreon/centreon - dev-test-change-branch;centreon/centreon - dev-update-frontend-core;centreon/centreon - dev-MON-12903-filter-translation;centreon/centreon - dev-MON-11139-20.04;centreon/centreon - dev-MON-11557-broker-conf-form-issues;centreon/centreon - dev-MON-12420-expired-password;centreon/centreon - dev-Update22.04-patch-1;centreon/centreon - dev-release-20.04.17;centreon/centreon - dev-upgrade-to-20.10.12;centreon/centreon - dev-bugfix_MON-14190-deprecated_status_detail;centreon/centreon - dev-update-to-22.10.0-beta2;centreon/centreon - dev-MON-15318-21.10;centreon/centreon - dev-MON-14394-escape-database-name-in-centacl-21.10.x;centreon/centreon - dev-CP7M12-fix-deprecated-removed-functionality;centreon/centreon - dev-MON-14498-sanitize-broker-listing-queries-21.04.x;centreon/centreon - dev-MON-6759-Fix-Poller-Listing;centreon/centreon - dev-dependabot/composer/symfony/serializer-4.4.35;centreon/centreon - dev-MON-14954-sanitize-bind-default-config-21.10.x;centreon/centreon - dev-MON-15016;centreon/centreon - dev-MON-13385-refacto-endpoints;centreon/centreon - dev-MON-14497-sanitize-acl-actions-queries-21.04.x;centreon/centreon - dev-MON-12231-legacy;centreon/centreon - dev-prepare-rn-19.10.19;centreon/centreon - dev-translations-test;centreon/centreon - dev-experimental;centreon/centreon - dev-MON-13065-re-enable-f-checkboxes;centreon/centreon - dev-MON-7022-change-wrong-constant;centreon/centreon - dev-upgrade-to-21.04.6;centreon/centreon - dev-MON-6620-ldap-xss;centreon/centreon - dev-MON-11907-for-21.04;centreon/centreon - dev-fix-react-hooks-order;centreon/centreon - dev-platform-topology-schema-validation;centreon/centreon - dev-DEVOPS-automate-dependabot4;centreon/centreon - dev-upgrade-cypress-v6;centreon/centreon - dev-MON-12784-login-form-is-blended-withbackground;centreon/centreon - dev-MON-10745-remove-bbdo-control;centreon/centreon - dev-MON-4547-remove-handlebars;centreon/centreon - dev-MON-5917-filter-testExistence;centreon/centreon - dev-MON-13409-fix-severities-on-Resource-Status;centreon/centreon - dev-MON-12128-fix-central-server-config;centreon/centreon - dev-MON-10994;centreon/centreon - dev-MON-12448-fix-21.10;centreon/centreon - dev-MON-11698-update-export-reload-conf-for-hostdisco;centreon/centreon - dev-MON-7152;centreon/centreon - dev-MON-12220-Replace-Header-scss-module-with-material-makeStyles-host;centreon/centreon - dev-MON-15389-22.04.x;centreon/centreon - dev-dependabot/npm_and_yarn/centreon/centreon-frontend-e7fabb8;centreon/centreon - dev-fix_issues_deb;centreon/centreon - dev-MON-5666-anomaly-service-not-renamed-in-graph-listing;centreon/centreon - dev-update-phpunit-9;centreon/centreon - dev-rebase-dev2204x-on-2204x;centreon/centreon - dev-MON-15104-acknowledgement-still-visible-in-resource-status;centreon/centreon - dev-add-user-flow-on-21.10;centreon/centreon - dev-MON-12598-refactor-constructor;centreon/centreon - dev-test-build-20.10;centreon/centreon - dev-MON-fix-20.10-chore;centreon/centreon - dev-MON-12507;centreon/centreon - dev-MON-14221;centreon/centreon - dev-MON-12031;centreon/centreon - dev-upgrade-to-21.04.9;centreon/centreon - dev-upgrade-to-20.04.9;centreon/centreon - dev-upgrade-to-20.10.3;centreon/centreon - dev-MON-13189-custom-uri;centreon/centreon - dev-MON-6244-optimize-reporting-sg;centreon/centreon - dev-MON-6377;centreon/centreon - dev-MON-12205;centreon/centreon - dev-MON-6633-select2;centreon/centreon - dev-MON-13354-waterfall-effect-in-extension-details-carousel;centreon/centreon - dev-MON-6892;centreon/centreon - dev-MON-7320-Manage-not-filled-curves;centreon/centreon - dev-MON-14208;centreon/centreon - dev-MON-6650-chip-color;centreon/centreon - dev-MON-13483-Close-menu-when-a-navigation-item-is-clicked;centreon/centreon - dev-update-to-20.04.12;centreon/centreon - dev-MON-11780-metaservice-detail-refacto-implementation;centreon/centreon - dev-IBT-507-downtime-fr-develop;centreon/centreon - dev-Align-poller-menu-with-centreon-ui-theme;centreon/centreon - dev-dependabot/composer/symfony/security-bundle-5.4.3;centreon/centreon - dev-MON-6914-hide-password-meta-service;centreon/centreon - dev-MON-12350-default-values;centreon/centreon - dev-MON-13228-adding-a-timeout-when-the-user-go-outside-the-menu-in-order-not-to-close-it;centreon/centreon - dev-deliver-api-doc-by-version;centreon/centreon - dev-MON-14700-sanitize-and-bind-centreon-connector-queries-for-2104;centreon/centreon - dev-MON-5552;centreon/centreon - dev-remove-non-ASCII-chars;centreon/centreon - dev-MON-14802-dev-21.10.x;centreon/centreon - dev-fixign-jenkinsfile-21.04.x;centreon/centreon - dev-fix-redirection-22.04-upgrade;centreon/centreon - dev-MON-11746-performance-chart-firefox;centreon/centreon - dev-MON-12828-dev-22.04.x-bis;centreon/centreon - dev-MON-5562-20.10.x-bis;centreon/centreon - dev-MON-14301-prepare-resource-status;centreon/centreon - dev-hotfix-MON-15384-check-centreon-reach-ui-option-with-autologin-22.04;centreon/centreon - dev-securing-routes-with-acls;centreon/centreon - dev-MON-12267-dev-21.10.x;centreon/centreon - dev-MON-10900-Add-link-to-performance-panel;centreon/centreon - dev-MON-11422-missing-a-space-between-fullname-and-as;centreon/centreon - dev-upgrade-to-20.04.10;centreon/centreon - dev-MON-11768-dev-22.04.X;centreon/centreon - dev-MON-12296-login-22.04;centreon/centreon - dev-MON-14969-sanitize-and-bind-menu-topology-listing-for-2110;centreon/centreon - dev-Bugfix_MON-15404_export_event_log;centreon/centreon - dev-Refacto-Poller-Menu;centreon/centreon - dev-fix_permis_poller;centreon/centreon - dev-MON-14955-sanitize-bind-centreon-notification-class-21.10.x;centreon/centreon - dev-upgrade-to-20.10.17;centreon/centreon - dev-MON-14585-21.10;centreon/centreon - dev-MON-14665-sanitize-and-bind-list-virtual-metrics-queries;centreon/centreon - dev-MON-14871-qa-fixes;centreon/centreon - dev-MON-7356-fix-update;centreon/centreon - dev-doc-lifecycle-update;centreon/centreon - dev-unattented-with-install-wizard;centreon/centreon - dev-MON-15137-SQLI-in-contact-group-form-21.10.x;centreon/centreon - dev-enh.ui.styles.icons.hs;centreon/centreon - dev-merge-master-and-21.04.0-beta2;centreon/centreon - dev-MON-10636-Add-graph-tab-for-hosts;centreon/centreon - dev-fix(doc)-add-missing-fixes-in-rn;centreon/centreon - dev-MON-12771;centreon/centreon - dev-MON-13160-po-file;centreon/centreon - dev-update-21.04.15-php-file;centreon/centreon - dev-codeowners;centreon/centreon - dev-MON-12220-Replace-Header-scss-module-with-material-makeStyles-service-;centreon/centreon - dev-MON-13200-vertical-scroll-on-menu-items;centreon/centreon - dev-doc-21.04-version;centreon/centreon - dev-MON-6292-clapi-dependency;centreon/centreon - dev-MON-7168;centreon/centreon - dev-fix-build-20.10.x;centreon/centreon - dev-MON-5775;centreon/centreon - dev-MON-12356-Refactor-User-menu-to-use-standard-buttons-and-links;centreon/centreon - dev-MON-14490;centreon/centreon - dev-MON-12350;centreon/centreon - dev-remote-server;centreon/centreon - dev-remove-fail-on-error;centreon/centreon - 18.10.0;centreon/centreon - dev-MON-6552-platforminformation-refacto;centreon/centreon - dev-MON-14797-debian-package-chrony-and-ntp-packages-in-conflict-2210;centreon/centreon - dev-avoid-watchdog-fail;centreon/centreon - dev-adapt-worflow;centreon/centreon - dev-MON-12296-test;centreon/centreon - dev-MON-15180;centreon/centreon - dev-codesee-arch-diagram-workflow-1661878165127;centreon/centreon - dev-MON-10822-fix-contact;centreon/centreon - dev-upgrade-to-2.8.36;centreon/centreon - dev-MON-12699-tokens;centreon/centreon - dev-MON-11738-refresh-menus-when-enabling-export-conf-btn;centreon/centreon - dev-update-to-20.10.6;centreon/centreon - dev-refacto-core-security;centreon/centreon - dev-codeowners-jenkinsfile;centreon/centreon - dev-MON-15284-fix-links-details-panel;centreon/centreon - dev-MON-12609-use-swc-loader;centreon/centreon - dev-MON-7123-exporting-graph-to!png-displays-unwanted-data;centreon/centreon - dev-fix-cypress;centreon/centreon - dev-dependabot/npm_and_yarn/react-router-dom-6.2.1;centreon/centreon - dev-MON-get-stats-19-10;centreon/centreon - dev-prepare-web-19.10.21;centreon/centreon - dev-MON-11309-tiles-are-pile-up;centreon/centreon - dev-MON-12454-replace-math-random-by-Crypto-API;centreon/centreon - dev-MON-14771-22-04.x;centreon/centreon - dev-qabranch-web;centreon/centreon - dev-MON-12191-fix-service-category-export;centreon/centreon - dev-fix-host-configuration-repository;centreon/centreon - dev-fix-the-date-locale-in-the-header;centreon/centreon - dev-MON-12463-meta;centreon/centreon - 2.7.1;centreon/centreon - dev-MON-14579-22.04;centreon/centreon - dev-MON-6557-new-query-parameters;centreon/centreon - dev-MON-6419-remove-checkstyle-trends;centreon/centreon - dev-MON-7417-ldap-22.04;centreon/centreon - dev-MON-7443-RS-import-failed;centreon/centreon - dev-release-21.04.8;centreon/centreon - dev-MON-11907;centreon/centreon - dev-upgrade-to-19.10.19;centreon/centreon - dev-MON-7097-secure-graph-periods-28x;centreon/centreon - dev-fix-MON-11932-dark-mode;centreon/centreon - dev-improve-cypress-development;centreon/centreon - dev-MON-6487-web-sso-authent;centreon/centreon - dev-MON-11944;centreon/centreon - dev-MON-14226-fix-graph-image-after-export-png-Central-dark-mode;centreon/centreon - dev-resync-21.04;centreon/centreon - dev-MON-5922-sanitize-host-dashboard-28x;centreon/centreon - dev-rebase-dev-21.10.x-on-21.10.x;centreon/centreon - dev-improve_snmpd_config;centreon/centreon - dev-upgrade-to-21.10.3;centreon/centreon - dev-fix-login;centreon/centreon - dev-remove-add-widget-from-tests;centreon/centreon - dev-MON-14576-integrate-php-cs-fixer-to-centreon-web;centreon/centreon - dev-upgrade-to-20.10.15;centreon/centreon - dev-MON-11964-abstractpresenter-construct;centreon/centreon - dev-MON-11222;centreon/centreon - dev-update-debian-repo-version;centreon/centreon - dev-build-alma-8;centreon/centreon - dev-MON-13137-templates;centreon/centreon - dev-MON-6805-details-panel-header-broken;centreon/centreon - dev-MON-14142-alignment-in-business-activity-and-view-on-the-demo;centreon/centreon - dev-MON-14952-remove-unused-mechanism-restart-reload-pollers-21.10.x;centreon/centreon - dev-MON-14201;centreon/centreon - help;centreon/centreon - dev-fix-safari-layout;centreon/centreon - dev-update-dsn-database-template;centreon/centreon - dev-MON-6719;centreon/centreon - dev-MON-11246-feature-branch;centreon/centreon - dev-MON-11500-envelope-size-rebased;centreon/centreon - dev-canary-master;centreon/centreon - dev-dependabot/npm_and_yarn/axios-0.21.2;centreon/centreon - dev-MON-6493-fix-router;centreon/centreon - dev-MON-11799-apache;centreon/centreon - dev-dependabot/npm_and_yarn/dompurify-2.3.3;centreon/centreon - dev-MON-14669-sanitize-and-bind-service-arguments-xml-queries;centreon/centreon - dev-MON-11924;centreon/centreon - dev-MON-14958-sanitize-and-bind-centreon-hostgroups-class-for-2110;centreon/centreon - dev-MON-11850-the-filter-alias-on-the-monitoring-resources-status-page;centreon/centreon - dev-MON-14971-remove-obsolete-code-in-acl-configuration-listing-for-2110;centreon/centreon - dev-MON-14167;centreon/centreon - dev-MON-6519-BAM-downtime-from-downtime-page;centreon/centreon - dev-upgrade-to-20.10.4;centreon/centreon - dev-MON-6960-upgrade-20.10;centreon/centreon - dev-MON-13068;centreon/centreon - dev-MON-6561-fix-timeline-events-order;centreon/centreon - dev-MON-10645-Use-name-filter-for-dynamic-criterias;centreon/centreon - dev-prepare-19.10.18-rn;centreon/centreon - dev-SECU-757;centreon/centreon - dev-MON-15054;centreon/centreon - dev-MON-6204-check-command;centreon/centreon - dev-MON-6655-pagination;centreon/centreon - dev-MON-12878;centreon/centreon - dev-dependabot/composer/friendsofsymfony/rest-bundle-3.0.5;centreon/centreon - dev-MON-6906-ods-view-details;centreon/centreon - dev-release-20.04.18;centreon/centreon - dev-add-technical-writer-for-po-files;centreon/centreon - dev-poc-yarn;centreon/centreon - dev-upgrade-to-21.04.11;centreon/centreon - dev-MON-14293;centreon/centreon - dev-MON-6693;centreon/centreon - dev-key-control-script;centreon/centreon - dev-dependabot/composer/symfony/validator-5.0.11;centreon/centreon - dev-MON-10988-replace-icomoon-by-mui-icons-in-extension-manager;centreon/centreon - dev-MON-14926-sanitize-bind-command-config-queries-21.10.x;centreon/centreon - dev-MON-14968-sanitize-and-bind-clapi-centreon-hostgroup-class-for-2110;centreon/centreon - dev-MON-13870-endpoint-severities;centreon/centreon - dev-MON-14919-poller;centreon/centreon - dev-MON-10908-list-hypermedia;centreon/centreon - dev-MON-12846-export-tag-severity-in-hosts-services-and-templates;centreon/centreon - dev-MON-11183-Timezone-tile-is-empty-but-is-still-displayed;centreon/centreon - dev-MON-step5;centreon/centreon - dev-MON-14984-POST-repositories;centreon/centreon - dev-dependabot/composer/nelmio/cors-bundle-2.1.1;centreon/centreon - dev-MON-6670-20.04.x;centreon/centreon - dev-MON-6332-e2e-resources-feature-based-develop;centreon/centreon - dev-fix-escape-database-name-21.10;centreon/centreon - dev-MON-5638-fix2;centreon/centreon - dev-MON-11770-api;centreon/centreon - dev-MON-6491-add-default-openid-on-upgrade;centreon/centreon - dev-MON-5103-Disable-ACK-when-selected-resources-are-OK;centreon/centreon - dev-MON-6588-filter-on-criticality-level;centreon/centreon - dev-jenkins-scheduling-containers;centreon/centreon - dev-MON-14928-remove-obsolete-code-in-legacy-service-detail-page-for-2110;centreon/centreon - dev-MON-10805;centreon/centreon - dev-MON-15127;centreon/centreon - dev-MON-5340-align-ACL-access-menu-table-list;centreon/centreon - dev-enhance-unattended-logs;centreon/centreon - dev-MON-4551-add-widget-sec;centreon/centreon - dev-MON-10926-align-branches;centreon/centreon - dev-MON-13930-Panel-of-details-TIMELINE-tab;centreon/centreon - dev-fix-develop-text-clapi-import-export;centreon/centreon - dev-MON-11780-implement-metaservice-detail;centreon/centreon - dev-MON-13879;centreon/centreon - dev-MON-14675-fix-the-new-api-to-download-csv-file-label-performance-missing-in-the-path;centreon/centreon - dev-fix-memory-limit;centreon/centreon - dev-upgrade-to-21.04.10;centreon/centreon - dev-MON-14216-dev-22.04;centreon/centreon - dev-MON-12465-pendo-is-not-started;centreon/centreon - dev-release-21.04.5;centreon/centreon - dev-MON-5609-sonardev-20-04;centreon/centreon - dev-MON-12886-graph-tiles-size-constant-in-RS-host-graph-panel;centreon/centreon - dev-MON-11924-interfaces;centreon/centreon - dev-update-centreon-test-lib;centreon/centreon - dev-MON-6235-Add-translation-for-Acknowledge-Downtine-popins-titles-notify-helper;centreon/centreon - dev-MON-7099-secure-engine-form;centreon/centreon - dev-MON-7196-Translation-for-Downtime-in-Timeline;centreon/centreon - dev-MON-12806;centreon/centreon - dev-Test_security_issues_189;centreon/centreon - dev-MON-12027-delete-unused-files;centreon/centreon - dev-Handle-ACK-and-DT-default-options;centreon/centreon - dev-MON-14973-sanitize-and-bind-media-import-for-2110;centreon/centreon - dev-MON-7122-move-upgrade;centreon/centreon - dev-fix-feature-files-listing;centreon/centreon - dev-MON-6988-mod-security;centreon/centreon - dev-upgrade-to-21.10.2;centreon/centreon - dev-MON-12897-fix-upgrade-prior-to-2104;centreon/centreon - dev-resync-22.04;centreon/centreon - dev-MON-14357-sanitize-media-sync-queries-dev-21.10.x;centreon/centreon - dev-MON-13975-compatibility;centreon/centreon - dev-5980-traps-regexp;centreon/centreon - dev-dependabot/npm_and_yarn/d3-array-3.0.4;centreon/centreon - dev-MON-12738-dev-22.04;centreon/centreon - dev-MON-10851;centreon/centreon - dev-release-21.10.0-rc.1;centreon/centreon - dev-upgrade-to-2.8.38;centreon/centreon - dev-timeline-style;centreon/centreon - dev-MON-11359-remove-animation;centreon/centreon - dev-MON-13389-listing-filtering;centreon/centreon - dev-add-user-flow-21.04;centreon/centreon - dev-MON-11176-align-buttons-preview-images;centreon/centreon - dev-MON-10960-Apply-search-filter-when-closing-filter-popup;centreon/centreon - dev-MON-12599;centreon/centreon - dev-react-relative-path;centreon/centreon - dev-MON-13569-sql-upgrade;centreon/centreon - dev-MON-10717-allow-detail-tiles-to-be-re-ordered;centreon/centreon - dev-MON-11987;centreon/centreon - dev-MON-12739-clean-appkey-usage;centreon/centreon - dev-MON-13872-listing;centreon/centreon - dev-MON-6771-fix;centreon/centreon - dev-dependabot/npm_and_yarn/centreon/centreon-frontend-9f71046;centreon/centreon - dev-upgrade-to-20.04.15;centreon/centreon - dev-DEVOPS-automate-dependabot2;centreon/centreon - dev-upgrade-to-20.10.18;centreon/centreon - dev-MON-6601-Implement-dynamic-filter-display;centreon/centreon - dev-MON-11510;centreon/centreon - dev-MON-12649-get-web-sso-configuration-implem;centreon/centreon - dev-MON-13113-visual-regression-tests-for-the-navigation-menu;centreon/centreon - dev-add_widget_missing;centreon/centreon - dev-dependabot/composer/symfony/property-access-5.4.3;centreon/centreon - dev-fix_chmod_unnecessary;centreon/centreon - dev-simplify-qg;centreon/centreon - dev-fix-integration-tests;centreon/centreon - dev-MON-13458;centreon/centreon - dev-MON-10695-end;centreon/centreon - dev-MON-14755-improve-central-engine-log-options;centreon/centreon - dev-fix-phpstan-trait;centreon/centreon - dev-dependabot/composer/psr/container-1.1.2;centreon/centreon - dev-fix_MON-13543_graph_export_API;centreon/centreon - dev-MON-15333;centreon/centreon - dev-clapi-order;centreon/centreon - dev-MON-4751-disable-trace;centreon/centreon - dev-MON-6279-Fix-loading-when-setting-empty-dt-comment;centreon/centreon - 2.8.20;centreon/centreon - dev-MON-12220-Replace-Header-scss-module-with-material-makeStyles(pollerMenu);centreon/centreon - dev-fix-anomaly-detection;centreon/centreon - dev-MON-6614-php73-build;centreon/centreon - dev-upgrade-to-21.10.5;centreon/centreon - dev-MON-7095-secure-reload-acl;centreon/centreon - dev-switch-to-centreon-frontend-develop;centreon/centreon - dev-MON-14377-debian;centreon/centreon - dev-dependabot/npm_and_yarn/tests/e2e/async-3.2.3;centreon/centreon - dev-MON-10908-acl;centreon/centreon - dev-MON-11965-implementation;centreon/centreon - dev-MON-14167-22.04;centreon/centreon - dev-MON-13491-Do-not-display-brackets-when-a-metric-does-not-have-unit;centreon/centreon - dev-upgrade-to-20.04.19;centreon/centreon - dev-hotfix-MON-14520-Rebuild-symfony-cache-during-upgrade;centreon/centreon - dev-MON-14744-typo-in-fr-autodiscovery-module;centreon/centreon - dev-MON-7436-add-tooltip-on-shortLabels

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us