← back
CVE-2019-16405

CVE-2019-16405

EPSS 27.0%
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
Affected products
n/a · n/a
public PoCs found — 3
githubgithub.com/TheCyberGeek/CVE-2019-16405.rb★ 9cve_referencepacketstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47948unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.htmlhttps://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.htmlhttps://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.htmlhttps://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.htmlhttps://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.htmlhttps://github.com/centreon/centreon/pull/7864https://github.com/centreon/centreon/pull/7884https://github.com/TheCyberGeek/CVE-2019-16405.rbhttps://thecybergeek.co.uk/cves/2019/09/17/CVE-2019-16405-06.htmlhttps://thecybergeek.co.uk/cves/2019/09/19/CVEs.html