OS Command Injection in Centreon

ALTO 8.8CVE-2020-22345 · GHSA-2q95-593f-g7h7 · Published 18/08/2021 · updated 17/06/2026

Em resumo

CVE-2020-22345 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta centreon/centreon, centreon (centreon).
Chance de exploração nos próximos 30 dias (EPSS): 3.8%, maior que 90.1% das vulnerabilidades.
Correção: atualize para 20.04.0 ou posterior.

Package	Affected versions	Patched versions
centreon/centreon Packagist	`< 20.04.0`	`20.04.0`
centreon centreon	`= 19.10.8`	No fix yet

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

NVD description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

References

nvd.nist.gov/vuln/detail/CVE-2020-22345 · ADVISORY
centreon/centreon#8467 · WEB
engindemirbilek.github.io/centreon-19.10-rce · WEB
centreon/centreon · PACKAGE

Mais vulnerabilidades de centreon/centreon

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

centreon/centreon

Packagist

< 20.04.0

20.04.0

centreon

= 19.10.8

No fix yet

Description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

NVD description

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

Mais vulnerabilidades de centreon/centreon

Ver tudo →