CVE-2019-16194: SQL injection in Centreon
SQL injection in Centreon
Other sources
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svcid parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 19.04.5 - Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 18.10.8
Event History
Frequently Asked Questions
What is CVE-2019-16194?
CVE-2019-16194 is a SQL injection vulnerability in Centreon through version 19.04.
How severe is CVE-2019-16194?
CVE-2019-16194 is classified as critical and has a severity rating of 9.8 out of 10.
What is the affected software?
The affected software is Centreon version 19.04.
How can an attacker exploit CVE-2019-16194?
An attacker can exploit CVE-2019-16194 by using the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php to perform SQL injection attacks.
Are there any available fixes for CVE-2019-16194?
Yes, fixes for CVE-2019-16194 are available in the Centreon GitHub repository.