ZDI-CAN-24536: ZDI-24-1323: Centreon updateContactContactGroup SQL Injection Privilege Escalation Vulnerability
Published Oct 8, 2024
·Updated
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.7. The following CVEs are assigned: CVE-2024-39843.
Affected Software
1 affected component
Centreon Centreon
Event History
Oct 8, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-24536?
The ZDI-CAN-24536 vulnerability has a CVSS rating of 4.7, indicating moderate severity.
2
How does ZDI-CAN-24536 allow escalation of privileges?
ZDI-CAN-24536 enables remote attackers to escalate privileges due to a flaw in the Centreon software.
3
Is authentication required to exploit ZDI-CAN-24536?
Yes, authentication is required to exploit the ZDI-CAN-24536 vulnerability.
4
What should I do to protect my system from ZDI-CAN-24536?
To protect against ZDI-CAN-24536, ensure that your Centreon software is updated to the latest version.
5
Which software is affected by ZDI-CAN-24536?
ZDI-CAN-24536 affects installations of Centreon.