OS Command Injection in Centreon

높음 8.8CVE-2020-22345 · GHSA-2q95-593f-g7h7 · Published 18/08/2021 · updated 17/06/2026

요약

CVE-2020-22345은(는) centreon/centreon, centreon (centreon)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.8%, 전체 취약점의 90.1%보다 높음.
조치: 20.04.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
centreon/centreon Packagist	`< 20.04.0`	`20.04.0`
centreon centreon	`= 19.10.8`	No fix yet

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

NVD description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

References

nvd.nist.gov/vuln/detail/CVE-2020-22345 · ADVISORY
centreon/centreon#8467 · WEB
engindemirbilek.github.io/centreon-19.10-rce · WEB
centreon/centreon · PACKAGE

centreon/centreon의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

centreon/centreon

Packagist

< 20.04.0

20.04.0

centreon

= 19.10.8

No fix yet

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

NVD description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

centreon/centreon의 다른 취약점

모두 보기 →