CVE-2022-41142: Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability

Published Jan 26, 2023

Updated

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator.

Affected Software

2 affected components

Centreon Centreon=22.04.2

Centreon Centreon

Event History

Jan 26, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Feb 28, 2025

Advisory Published

via ZDI·03:42 AM

Frequently Asked Questions

What is CVE-2022-41142?

CVE-2022-41142 is a vulnerability that allows remote attackers to escalate privileges on Centreon installations.

What is the severity of CVE-2022-41142?

CVE-2022-41142 has a severity score of 8.8, which is considered high.

How does CVE-2022-41142 affect Centreon?

CVE-2022-41142 affects Centreon installations, allowing remote attackers to escalate privileges.

Is authentication required to exploit CVE-2022-41142?

Yes, authentication is required to exploit CVE-2022-41142.

How can I fix CVE-2022-41142?

To fix CVE-2022-41142, apply the necessary updates and patches provided by Centreon.