PT-2015-5350 · Centreon · Centreon

Published 2015-07-14 · Updated 2022-05-14 · CVE-2015-1561

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Centreon versions 2.5.4 and earlier

Description The issue arises from an incorrect regular expression used in the escape command function, located in the include/Administration/corePerformance/getStats.php file. This allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns id parameter.

Recommendations For Centreon versions 2.5.4 and earlier, update to Centreon 19.10.0 or later, where the offending file has been deleted, thus resolving the issue. As a temporary workaround, consider restricting access to the getStats.php file to minimize the risk of exploitation. Avoid using the ns id parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2015-1561

GHSA-C4FJ-3WQQ-G9C9

Affected Products

Centreon

References · 14

• 🔥 http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/37528 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1561 · Security Note
• https://osv.dev/vulnerability/GHSA-c4fj-3wqq-g9c9 · Vendor Advisory
• https://github.com/centreon/centreon-archived · Note
• https://github.com/centreon/centreon-archived/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a · Note
• https://github.com/centreon/centreon-archived/commit/387dffdd051dbc7a234e1138a9d06f3089bb55bb · Note
• https://github.com/centreon/centreon-archived/pull/7271 · Note
• https://github.com/centreon/centreon-archived/pull/7083 · Note
• https://github.com/centreon/centreon/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a#diff-27550b563fa8d660b64bca871a219cb1 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1561 · Note
• http://securityfocus.com/archive/1/535961/100/0/threaded · Note
• https://web.archive.org/web/20201125112637/http://securityfocus.com/archive/1/535961/100/0/threaded · Note
• https://forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1138a9d06f3089bb55bb · Note