CVE-2019-16405: Critical severity centreon vulnerability
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for Centreon Web?
The vulnerability ID for Centreon Web is CVE-2019-16405.
What is the severity of CVE-2019-16405?
CVE-2019-16405 has a severity rating of 7.2 (Critical).
What is the affected software version range for Centreon Web?
Centreon Web versions before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5, and 19.10.x before 19.10.2 are affected.
How does CVE-2019-16405 allow remote code execution?
Remote code execution is possible in Centreon Web if an administrator can modify Macro Expression location settings.
Where can I find more information about CVE-2019-16405?
You can find more information about CVE-2019-16405 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.html), [Centreon Documentation - Centreon 18.10 Release Notes](https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html), [Centreon Documentation - Centreon 19.04 Release Notes](https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html).