PT-2020-10386 · Centreon · Centreon Infrastructure Monitoring

Published 2020-01-16 · Updated 2021-07-21 · CVE-2019-20327

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Centreon Infrastructure Monitoring Software versions prior to 20.04

Description The issue concerns insecure permissions in the cwrapper perl component of Centreon Infrastructure Monitoring Software. This component is a setuid executable that allows the execution of Perl scripts with root privileges, potentially enabling local attackers to gain elevated privileges.

Recommendations For Centreon Infrastructure Monitoring Software versions prior to 20.04, update to version 20.04 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-20327

Affected Products

Centreon Infrastructure Monitoring

References · 4

• https://osv.dev/vulnerability/CVE-2019-20327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20327 · Security Note
• https://centreon.com/en · Note
• https://gist.github.com/Diefunction/9237f46b8659a65ab08de8ec9c258139 · Note