| Package | Affected versions | Patched versions |
|---|---|---|
| centreon | = 2.5.1 | |
| centreon enterprise server | = 2.2 |
displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free