Security Advisory

CVE-2020-13252

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-21 03:35:00
Last updated 2024-08-04 12:11:19
Assigner mitre
State PUBLISHED

Description

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.