CVE-2022-40043: Centreon SQL Injection vulnerability via esc_name parameter
Centreon SQL Injection vulnerability via escname parameter
Other sources
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname (Escalation Name) parameter at Configuration/Notifications/Escalations. Versions 21.04.16, 21.10.8, and 22.04.2 contain patches.
— GitHub
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname (Escalation Name) parameter at Configuration/Notifications/Escalations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 22.04.1 - Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 21.10.8 - Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 21.04.16 - Upgrade
Upgrade
composer/centreon/centreonto a version that resolves this vulnerability.Fixed in 22.04.2 - Upgrade
Upgrade
Centreonto a version that resolves this vulnerability.Fixed in 21.04.16 - Upgrade
Upgrade
Centreonto a version that resolves this vulnerability.Fixed in 21.10.8 - Upgrade
Upgrade
Centreonto a version that resolves this vulnerability.Fixed in 22.04.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this Centreon vulnerability?
The vulnerability ID is CVE-2022-40043.
What is the severity rating of CVE-2022-40043?
The severity rating of CVE-2022-40043 is high with a value of 8.8.
What is the description of CVE-2022-40043?
CVE-2022-40043 is a SQL injection vulnerability in Centreon v20.10.18 via the esc_name parameter at Configuration/Notifications/Escalations.
What is the affected software version of CVE-2022-40043?
CVE-2022-40043 affects Centreon v20.10.18.
How can I fix CVE-2022-40043?
To fix CVE-2022-40043, it is recommended to update Centreon to a patched version provided by the vendor.