CVE-2014-3829

High

Published: 23/10/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The displayServiceStatus.php file in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) contains a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in the session_id or template_id parameters, related to the command_line variable.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to upgrade to Centreon web version 2.5.3 or later to mitigate this vulnerability.

Other vulnerabilities in Centreon 2.5.1, Centreon Enterprise Server 2.2

CVE-2014-3828High
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 allow remote attackers to execute arbitrary SQL commands. These issues have been fixed in Centreon web 2.5.3.

Original NVD description (English source)

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.