CVE-2024-23118: Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
Summary
CVE-2024-23118: Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. Affects centreon/centreon versions < 22.10.15. Fixed in 22.10.15. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Centreon is an open-source monitoring software that allows users to monitor their IT infrastructure and services. It provides a centralized platform for monitoring various components such as hosts, services, and applications. Centreon is widely used by organizations to ensure the availability and performance of their systems.
However, a vulnerability has been discovered in Centreon that allows remote attackers to execute arbitrary code on affected installations. This vulnerability, identified as CVE-2024-23118, is a SQL injection remote code execution vulnerability that requires authentication to exploit.
The specific flaw exists within the updateContactHostCommands function, where user-supplied strings are not properly validated before being used to construct SQL queries. This allows an attacker to inject malicious SQL code and execute arbitrary commands in the context of the service account. The vulnerability has a CVSS score of 7.2, indicating a high severity level.
Vulnerability Detail
The Centreon updateContactHostCommands SQL Injection Remote Code Execution vulnerability allows remote attackers to execute arbitrary code on affected installations. By exploiting the lack of proper validation of user-supplied strings, an attacker can inject malicious SQL code and execute arbitrary commands in the context of the service account. This can lead to unauthorized access, data manipulation, or even complete compromise of the affected system. The vulnerability requires authentication to exploit, limiting the potential attackers to those with valid credentials.
How To Fix
Minimum fixed version
22.10.15
This is the first release that contains the fix.
composer require centreon/centreon:22.10.15Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The Centreon updateContactHostCommands SQL Injection Remote Code Execution vulnerability poses a significant risk to affected installations. It is crucial for users to update their Centreon installations to version 22.10.15 or later to mitigate this vulnerability. Failure to do so may result in unauthorized access, data manipulation, or complete compromise of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for centreon/centreon →
FAQ
Centreon is an open-source monitoring software used to monitor IT infrastructure and services.
This vulnerability allows remote attackers to execute arbitrary code on affected Centreon installations, potentially leading to unauthorized access, data manipulation, or complete compromise of the system.
Yes, authentication is required to exploit this vulnerability, limiting the potential attackers to those with valid credentials.
To fix this vulnerability, it is recommended to update Centreon to version 22.10.15 or later. Detailed instructions can be found in the official Centreon documentation or by contacting Centreon support.
The CVSS score of this vulnerability is 7.2, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for centreon/centreon.
