CVE-2015-1561: Centreon Command Injection
Centreon Command Injection
Other sources
The escapecommand function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (offending file deleted in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the nsid parameter.
The escapecommand function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the nsid parameter.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 2.8.28 - Upgrade
Upgrade
Centreonto a version that resolves this vulnerability.Fixed in 19.10.0
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1561?
CVE-2015-1561 has a high severity rating due to its potential to allow unauthorized command execution by remote authenticated users.
How do I fix CVE-2015-1561?
To fix CVE-2015-1561, upgrade your Centreon software to version 2.8.28 or later.
What versions of Centreon are affected by CVE-2015-1561?
Centreon versions 2.5.4 and earlier are affected by CVE-2015-1561.
What type of vulnerability is CVE-2015-1561?
CVE-2015-1561 is a remote code execution vulnerability due to an incorrect regular expression in the `escape_command` function.
Is CVE-2015-1561 still exploitable in later versions of Centreon?
No, CVE-2015-1561 is no longer exploitable in Centreon version 19.10.0 and later, as the offending file was deleted.