OS Command Injection in Centreon

ALTO 8.8CVE-2020-22345 · GHSA-2q95-593f-g7h7 · Published 18/08/2021 · updated 17/06/2026

En resumen

CVE-2020-22345 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a centreon/centreon, centreon (centreon).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.8%, mayor que el 90.1% de las vulnerabilidades.
Solución: actualizar a 20.04.0 o posterior.

Package	Affected versions	Patched versions
centreon/centreon Packagist	`< 20.04.0`	`20.04.0`
centreon centreon	`= 19.10.8`	No fix yet

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

NVD description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

References

nvd.nist.gov/vuln/detail/CVE-2020-22345 · ADVISORY
centreon/centreon#8467 · WEB
engindemirbilek.github.io/centreon-19.10-rce · WEB
centreon/centreon · PACKAGE

Más vulnerabilidades de centreon/centreon

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

centreon/centreon

Packagist

< 20.04.0

20.04.0

centreon

= 19.10.8

No fix yet

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

NVD description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

Más vulnerabilidades de centreon/centreon

Ver todo →