high8.8
CVE-2020-22345
OS Command Injection in Centreon
Impact
/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | centreon/centreon | <= 19.10.8 | 20.04.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centreon | Centreon | Version 19.10.8 |