Centreon Project Centreon Web SQL Injection (CVE-2024-0637)

Related Vulnerabilities: CVE-2024-0637  

Check Point Reference: CPAI-2024-0211 Date Published: 30 Apr 2024 Severity: Medium Last Updated: Tuesday 30 April, 2024 Source: Industry Reference:CVE-2024-0637
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Centreon Project Centreon Web 22.10.x prior to 22.10.17
Centreon Project Centreon Web 23.04.x prior to 23.04.13
Centreon Project Centreon Web 23.10.x prior to 23.10.5 Vulnerability Description An SQL Injection vulnerability exists in the Centreon Web module. A remote, authenticated attacker could exploit this vulnerability by sending a maliciously crafted request to the server. A successful attack may result in arbitrary SQL command execution against the database on the target server.