CVE-2019-16405
First published: Thu Nov 21 2019(Updated: )
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Centreon Centreon Web | <2.8.30 | |
| Centreon Centreon Web | >=18.10.0<18.10.8 | |
| Centreon Centreon Web | >=19.04.0<19.04.5 | |
| Centreon Centreon Web | >=19.10.0<19.10.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.html
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html
- https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.html
- https://github.com/TheCyberGeek/CVE-2019-16405.rb
- https://github.com/centreon/centreon/pull/7864
- https://github.com/centreon/centreon/pull/7884
- https://thecybergeek.co.uk/cves/2019/09/17/CVE-2019-16405-06.html
- https://thecybergeek.co.uk/cves/2019/09/19/CVEs.html
Frequently Asked Questions
What is the vulnerability ID for Centreon Web?
The vulnerability ID for Centreon Web is CVE-2019-16405.
What is the severity of CVE-2019-16405?
CVE-2019-16405 has a severity rating of 7.2 (Critical).
What is the affected software version range for Centreon Web?
Centreon Web versions before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5, and 19.10.x before 19.10.2 are affected.
How does CVE-2019-16405 allow remote code execution?
Remote code execution is possible in Centreon Web if an administrator can modify Macro Expression location settings.
Where can I find more information about CVE-2019-16405?
You can find more information about CVE-2019-16405 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.html), [Centreon Documentation - Centreon 18.10 Release Notes](https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html), [Centreon Documentation - Centreon 19.04 Release Notes](https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html).
- collector/nvd-index
- vendor/centreon
- canonical/centreon centreon web
- version/centreon centreon web/18.10.0
- version/centreon centreon web/19.04.0
- version/centreon centreon web/19.10.0