Security Advisory

CVE-2019-17642

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-05 16:55:32
Last updated 2024-08-05 01:47:13
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/views/scan/ajax/call.php in the Autodiscovery plugin.