PT-2014-5531 · Centreon · Centreon Enterprise Server+2

Maz + 1 · Published 2014-10-23 · Updated 2019-07-30 · CVE-2014-3828

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centreon versions 2.5.1 through 2.5.2 Centreon Enterprise Server version 2.2

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the index id parameter to "views/graphs/common/makeXML ListMetrics.php", the sid parameter to "views/graphs/GetXmlTree.php", the session id parameter to "views/graphs/graphStatus/displayServiceStatus.php", the mnftr id parameter to "configuration/configObject/traps/GetXMLTrapsForVendor.php", or the index parameter to "common/javascript/commandGetArgs/cmdGetExample.php" in include/.

Recommendations For Centreon versions 2.5.1 through 2.5.2, update to Centreon web 2.5.3. For Centreon Enterprise Server version 2.2, update to a version that includes the fix, as the specific fixed version is not provided in the input data. As a temporary workaround, consider restricting access to the vulnerable API endpoints and parameters, such as index id, sid, session id, mnftr id, and index, until a patch is available.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-3828

Affected Products

Centreon

Centreon Enterprise Server

Centreon Web

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/centreon_sqli_exec.rb · Exploit
• 🔥 http://securityfocus.com/bid/70648 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Oct/78 · Exploit
• 🔥 https://exploit-db.com/exploits/41676 · Exploit
• 🔥 https://exploit-db.com/exploits/35078 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3828 · Security Note
• https://github.com/centreon/centreon/commit/cc2109804dd69057cb209037113796ec5ffdce90#diff-e328097503b14fbb117e0db798aefcde · Note
• http://kb.cert.org/vuls/id/298796 · Note
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.5/centreon-2.5.3.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3828 · Note