Centreon BAM Vulnerable to SQL Injection
CVE-2024-45757

7.2HIGH

Key Information:

Vendor

Centreon

Status
centreon-bam
Vendor
CVE Published:
3 December 2024

What is CVE-2024-45757?

A vulnerability exists in Centreon's centreon-bam that allows SQL injection through the user-settings form, impacting versions 24.04, 23.10, 23.04, and 22.10. This security flaw is particularly critical as it can be exploited by authenticated users who possess high-privileged access, potentially leading to unauthorized data manipulation or disclosure. Organizations utilizing affected versions should apply necessary patches and review user privileges to mitigate risks.

References

https://github.com/centreon/centreon/releases
https://thewatch.centreon.com/latest-security-bulletins-6...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.