Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remote request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Centreon 操作系统命令注入漏洞
Vulnerability Description
Centreon（Merethis Centreon）是法国Centreon公司的一套开源的系统监控工具 。该产品主要提供对网络、系统和应用程序等资源的监控功能。 Centreon 19.10版本中存在安全漏洞。远程攻击者可借助JSON数据中带有shell元字符的server_ip字段利用该漏洞执行任意的操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A