Improper Privilege Management Affecting centreon/centreon package, versions <19.10.13
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
1.36% (87th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-CENTREONCENTREON-564443
- published 7 Apr 2020
- disclosed 6 Apr 2020
- credit SpengeSec
Introduced: 6 Apr 2020
CVE-2019-19699 Open this link in a new tabHow to fix?
Upgrade centreon/centreon to version 19.10.13 or higher.
Overview
centreon/centreon is a network, system, applicative supervision and monitoring tool.
Affected versions of this package are vulnerable to Improper Privilege Management. It allows authenticated remote code execution, enabling an attacker with privileges to modify an executable file executed by root at 22:30 every day.
References
CVSS Scores
version 3.1