CVE-2019-16405
High · 7.2CVSS
7.2
EPSS
27.0%
Published
Nov 21, 2019
CISA due date
—
The record
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | centreon/centreon | 0 | 18.10.8 |
| Packagist | centreon/centreon | 19.0.0 | 19.04.5 |
| packagist | centreon/centreon | 19.0.0 | No fix |
Related vulnerabilities
- CVE-2024-23117 Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. Also affects centreon/centreon
- CVE-2024-23118 Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. Also affects centreon/centreon
- CVE-2024-23115 Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. Also affects centreon/centreon
- CVE-2024-23116 Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. Also affects centreon/centreon
- CVE-2024-0637 Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. Also affects centreon/centreon
- CVE-2021-37557 A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8… Also affects centreon/centreon
- CVE-2021-37556 A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8… Also affects centreon/centreon
- CVE-2019-13024 Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows… Also affects centreon/centreon