Insecure Permissions in Centreon Web across multiple versions
CVE-2021-26804

6.5MEDIUM

Key Information:

Vendor

Centreon

Status
Centreon Web
Vendor
CVE Published:
4 May 2021

What is CVE-2021-26804?

An insecure permissions vulnerability in Centreon Web allows remote attackers to manipulate the file upload process. By altering the file extension to '.gif', attackers can upload potentially malicious files through the 'Administration/Parameters/Images' section. This exploit can lead to unauthorized access to sensitive functionalities within the application, compromising its overall security.

References

https://medium.com/%40pedro.ferreira.phf/vulnerability-af...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.