GHSA-f24j-f97w-65h8 CVE-2018-21025
Centreon Privilege Escalation
Critical
Packagist
- Severity
- 9.8 / 10
- Critical · CVSS 3.1
- Exploit chance (EPSS)
- 2.84%
- Chance of exploitation in the next 30 days. Higher than 86.65% of scored vulnerabilities.
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- CWE-269 Improper Privilege Management
- Fix
- None yet
- No fixed version published
Description
In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.
Affected versions
Packagist
| Package | Vulnerable | Fixed in |
|---|---|---|
| centreon/centreon | <= 19.04.3 |
No fix yet |
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
Severity breakdown
CVSS 3.1 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Weakness
CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
How to prevent it
- Architecture and Design, Operation: Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
- Architecture and Design: Follow the principle of least privilege when assigning access rights to entities in a software system.
- Architecture and Design: Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.
References
Advisories
Packages
Other links
Timeline
- Published
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-626r-cj47-p49g Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability | High | Also affects centreon/centreon |
| GHSA-2j4g-v4fv-rhwg Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability | High | Also affects centreon/centreon |
| GHSA-j8hg-v5qv-9m28 Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability | High | Also affects centreon/centreon |
| GHSA-j4pc-vqvc-4p9x Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability | High | Also affects centreon/centreon |
| GHSA-qjvm-p5vg-437c Centreon updateGroups SQL Injection Remote Code Execution Vulnerability | High | Also affects centreon/centreon |
| GHSA-22v7-v3mj-pm8r Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability | High | Also affects centreon/centreon |
| GHSA-j5wx-jvw3-j363 Centreon vulnerable to SQL Injection | Critical | Also affects centreon/centreon |
| GHSA-rv5q-72p2-2q24 Centreon contains cross-site scripting vulnerability via esc_name parameter | Medium | Also affects centreon/centreon |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor