| Package | Affected versions | Patched versions |
|---|---|---|
| centreon web | ≥ 18.10.0, < 18.10.4≥ 2.8, < 2.8.27 | 18.10.42.8.27 |
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the command_hostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free