Arbitrary Command Execution in Centreon 2.5.1 and Centreon Enterprise Server 2.2

Arbitrary Command Execution in Centreon 2.5.1 and Centreon Enterprise Server 2.2

CVE-2014-3829 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.

Learn more about our Web App Pen Testing.