CVE-2019-17647

Опубликовано: 05 мар. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter.

Ссылки

https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html#centreon-web-18-10-8
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html#centreon-web-19-04-5
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html#centreon-web-19-10-2
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10/index.html
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.html#centreon-web-2-8-30
Release Notes
Vendor Advisory
https://github.com/centreon/centreon/pull/8063
Third Party Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html#centreon-web-18-10-8
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html#centreon-web-19-04-5
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html#centreon-web-19-10-2
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10/index.html
Release Notes
Vendor Advisory
https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.html#centreon-web-2-8-30
Release Notes
Vendor Advisory
https://github.com/centreon/centreon/pull/8063
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*

Версия до 2.8.30 (исключая)

cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*

Версия от 18.0.0 (включая) до 18.10.8 (исключая)

cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*

Версия от 19.04.0 (включая) до 19.04.5 (исключая)

cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*

Версия от 19.10.0 (включая) до 19.10.2 (исключая)

EPSS

Процентиль: 22%

0.00072

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-jv8x-mwvf-3j5w

github

больше 3 лет назад

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter.

EPSS

Процентиль: 22%

0.00072

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89