Aug. 3, 2022, 4:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of Virtual Metrics. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16336.

centreon cve

Technical Product Manager, Electronic Warfare - Active Clearance

@ Anduril | Costa Mesa, California, United States

Specialist Operations and Support/ Entry Professional - IT Security, Cyber Security & Governance

@ Norsk Hydro | Jaipur, IN

Embedded Software Engineer, Electronic Warfare

@ Anduril | Costa Mesa, California, United States

Cyber Security Analyst

@ Peraton | Chantilly, VA, United States

Principal Consultant, Proactive Security - Unit 42

@ Palo Alto Networks | Sydney, Australia

Penetration Tester Consultant

@ RSI Security | United States - Remote