PT-2015-5350 · Centreon · Centreon

Publicado 2015-07-14 · Atualizado 2022-05-14 · CVE-2015-1561

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Centreon versions 2.5.4 and earlier

Description The issue arises from an incorrect regular expression used in the escape command function, located in the include/Administration/corePerformance/getStats.php file. This allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns id parameter.

Recommendations For Centreon versions 2.5.4 and earlier, update to Centreon 19.10.0 or later, where the offending file has been deleted, thus resolving the issue. As a temporary workaround, consider restricting access to the getStats.php file to minimize the risk of exploitation. Avoid using the ns id parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2015-1561

GHSA-C4FJ-3WQQ-G9C9

Produtos afetados

Centreon

Referências · 14

• 🔥 http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/37528 · Exploit
• https://github.com/centreon/centreon-archived · Nota
• https://github.com/centreon/centreon-archived/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a · Nota
• https://github.com/centreon/centreon-archived/commit/387dffdd051dbc7a234e1138a9d06f3089bb55bb · Nota
• https://github.com/centreon/centreon-archived/pull/7271 · Nota
• https://github.com/centreon/centreon-archived/pull/7083 · Nota
• https://github.com/centreon/centreon/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a#diff-27550b563fa8d660b64bca871a219cb1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1561 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1561 · Nota
• http://securityfocus.com/archive/1/535961/100/0/threaded · Nota
• https://web.archive.org/web/20201125112637/http://securityfocus.com/archive/1/535961/100/0/threaded · Nota
• https://osv.dev/vulnerability/GHSA-c4fj-3wqq-g9c9 · Aviso do Fabricante
• https://forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1138a9d06f3089bb55bb · Nota