PT-2017-7257 · Centreon · Centreon Web+1

Publicado 2017-09-07 · Atualizado 2022-05-14 · CVE-2015-7672

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 18.10.0 Centreon web versions prior to 2.8.27 Centreon version 2.6.1

Description A cross-site scripting (XSS) issue exists. This allows for potential malicious script execution.

Recommendations For Centreon version 2.6.1, update to Centreon 18.10.0 or later. For Centreon web versions prior to 2.8.27, update to Centreon web 2.8.27 or later. For Centreon versions prior to 18.10.0, update to Centreon 18.10.0 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-7672

GHSA-8W3F-236Q-53M4

Produtos afetados

Centreon

Centreon Web

Referências · 10

• 🔥 https://youtube.com/watch?v=sIONzwQAngU · Exploit
• https://github.com/centreon/centreon-archived/pull/6953 · Nota
• https://github.com/centreon/centreon-archived/pull/6637 · Nota
• https://github.com/centreon/centreon/pull/6953 · Nota
• https://github.com/centreon/centreon/pull/6637 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7672 · Nota de Segurança
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html · Nota
• https://osv.dev/vulnerability/GHSA-8w3f-236q-53m4 · Aviso do Fabricante
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.27.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7672 · Nota