PT-2017-7257 · Centreon · Centreon Web+1

Published 2017-09-07 · Updated 2022-05-14 · CVE-2015-7672

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 18.10.0 Centreon web versions prior to 2.8.27 Centreon version 2.6.1

Description A cross-site scripting (XSS) issue exists. This allows for potential malicious script execution.

Recommendations For Centreon version 2.6.1, update to Centreon 18.10.0 or later. For Centreon web versions prior to 2.8.27, update to Centreon web 2.8.27 or later. For Centreon versions prior to 18.10.0, update to Centreon 18.10.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-7672

GHSA-8W3F-236Q-53M4

Affected Products

Centreon

Centreon Web

References · 10

• 🔥 https://youtube.com/watch?v=sIONzwQAngU · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7672 · Security Note
• https://osv.dev/vulnerability/GHSA-8w3f-236q-53m4 · Vendor Advisory
• https://github.com/centreon/centreon-archived/pull/6953 · Note
• https://github.com/centreon/centreon-archived/pull/6637 · Note
• https://github.com/centreon/centreon/pull/6953 · Note
• https://github.com/centreon/centreon/pull/6637 · Note
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html · Note
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.27.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7672 · Note