| Package | Affected versions | Patched versions |
|---|---|---|
| centreon/centreon | < 19.04.15 | 19.04.15 |
| centreon | ≥ 19.04.0, < 19.04.15 | 19.04.15 |
Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free