PT-2024-31750 · Centreon · Centreon Bi Server

Ludovic Tavernier

+2

·

Published

2024-10-11

·

Updated

2024-10-15

·

CVE-2024-45754

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Centreon BI Server versions 24.04.x through 24.04.2 Centreon BI Server versions 23.10.x through 23.10.7 Centreon BI Server versions 23.04.x through 23.04.10 Centreon BI Server versions 22.10.x through 22.10.10
Description: An issue was discovered in the centreon-bi-server component, allowing SQL injection to occur in the listing of configured reporting jobs. This can be exploited by authenticated users with high-privileged access.
Recommendations: For Centreon BI Server versions 24.04.x through 24.04.2, update to version 24.04.3 or later. For Centreon BI Server versions 23.10.x through 23.10.7, update to version 23.10.8 or later. For Centreon BI Server versions 23.04.x through 23.04.10, update to version 23.04.11 or later. For Centreon BI Server versions 22.10.x through 22.10.10, update to version 22.10.11 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-45754

Affected Products

Centreon Bi Server