Centreon Cross-Site Scripting Remote Code Execution Vulnerability
CVE-2023-51633

9.6CRITICAL

Key Information:

Vendor

Centreon

Status
Centreon Web
Vendor
CVE Published:
3 May 2024

What is CVE-2023-51633?

The Centreon product is impacted by a vulnerability that allows remote attackers to execute arbitrary code on installations due to a flaw in processing the sysName OID in SNMP. This issue arises from insufficient validation of user-supplied data, enabling attackers to inject malicious scripts. Exploiting this vulnerability requires user interaction, allowing attackers to execute code within the service account's context, posing significant risks to system integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-24-416/

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.