CVE-2018-11587 Centreon RCE Vulnerability

What is CVE-2018-11587?

CVE-2018-11587 is a critical code injection vulnerability in Centreon Centreon, published on 25 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.

Weakness: CWE-94

Which versions are affected by CVE-2018-11587?

4 open source packages ship an affected version, including centreon/centreon. It affects 2 products.

Products include Centreon Centreon, Centreon Centreon Web.

How do I fix CVE-2018-11587?

Upgrade centreon/centreon to 2.8.24 or later.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2018-11587 being exploited?

There is no known exploitation of CVE-2018-11587 in the wild and no public exploit code.

Other vulnerabilities in Centreon Centreon

• CVE-2021-37558 SQL injection in n/a Critical 9.8
• CVE-2019-17647 SQL injection in n/a Critical 9.8
• CVE-2018-21024 File upload in n/a Critical 9.8
• CVE-2019-16194 SQL injection in Centreon Critical 9.8
• CVE-2018-19281 Centreon allows SNMP trap SQL Injection Critical 9.8

All Centreon Centreon vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c8qc-cp8v-prpx.