CVE-2024-0637: Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
Summary
CVE-2024-0637: Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. Affects centreon/centreon versions < 22.10.15. Fixed in 22.10.15. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Centreon is a software package that provides centralized monitoring of IT infrastructure. It allows users to monitor various aspects of their systems, including network devices, servers, and applications. The vulnerability in question affects Centreon installations and can be exploited by remote attackers to execute arbitrary code. This vulnerability requires authentication to exploit. The specific flaw exists within the updateDirectory function, where user-supplied strings are not properly validated before being used in SQL queries. As a result, an attacker can leverage this vulnerability to execute code within the context of the service account.
Vulnerability Detail
The Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. By exploiting the lack of proper validation of user-supplied strings, an attacker can construct malicious SQL queries that execute code within the service account's context. This can lead to unauthorized access, data manipulation, and potential system compromise. The vulnerability has a CVSS score of 8.8, indicating a high severity level.
How To Fix
Minimum fixed version
22.10.15
This is the first release that contains the fix.
composer require centreon/centreon:22.10.15Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official patch or upgrade to a fixed version of Centreon to mitigate the risk.
Conclusion
The Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability is a high-severity vulnerability that allows remote attackers to execute arbitrary code on affected installations. To mitigate the risk, it is crucial to update Centreon to the latest version or apply the official patch. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for centreon/centreon →
FAQ
Centreon is a software package that provides centralized monitoring of IT infrastructure. It allows users to monitor network devices, servers, and applications.
This vulnerability allows remote attackers to execute arbitrary code on affected Centreon installations. It can lead to unauthorized access, data manipulation, and potential system compromise.
Yes, authentication is required to exploit this vulnerability.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
To fix this vulnerability, it is recommended to update Centreon to version 22.10.15 or later. Follow the upgrade instructions provided by the Centreon project.
References
Related vulnerabilities
Recent vulnerabilities recorded for centreon/centreon.
