CVE-2015-1560: SQL Injection
SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Centreon webto a version that resolves this vulnerability.Fixed in 2.7.0
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1560?
CVE-2015-1560 has a high severity rating due to its potential for remote code execution via SQL injection.
How do I fix CVE-2015-1560?
To fix CVE-2015-1560, upgrade Centreon to version 2.7.0 or later where the vulnerability has been patched.
What systems are affected by CVE-2015-1560?
CVE-2015-1560 affects Centreon versions 2.5.4 and earlier.
Can CVE-2015-1560 allow attackers to access sensitive information?
Yes, CVE-2015-1560 can allow attackers to execute arbitrary SQL commands, potentially exposing sensitive data.
Is CVE-2015-1560 a known SQL injection vulnerability?
Yes, CVE-2015-1560 is identified as an SQL injection vulnerability that impacts the isUserAdmin function in Centreon.