Vulnerability Report

CVE-2019-19699

RCE

Title: Centreon RCE

RCE

Proof Of Concept

PoC Available for CVE-2019-19699

CWE Category CWE-269
Published Date Apr 06, 2020
Modified Date Nov 21, 2024
Exploit Status Available
Score 7.2 CVSS v3.1
Exploit Probability (EPSS)
27.49%

Vulnerability Summary

CVE-2019-19699: There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. To exploit the vulnerability, someone must have Admin access to the Centreon Web Interface and create a custom main.php?p=60803&type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command via the main.php?p=60901&o=c&server_id=1 URI. This is triggered via an export of the Poller Configuration.

Impacted Vendors

C
centreon 1
M
merethis 1

Reference Links

https://download.centreon.com/ https://github.com/SpengeSec/CVE-2019-19699 https://spenge.pw/cves/ https://twitter.com/SpengeSec/status/1204418071764463618 https://www.centreon.com/ https://download.centreon.com/ https://github.com/SpengeSec/CVE-2019-19699 https://spenge.pw/cves/ https://twitter.com/SpengeSec/status/1204418071764463618 https://www.centreon.com/
CVSS v3.1
Source Entity [email protected]
Severity HIGH
7.2
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
UNCHANGED
RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
Source Entity [email protected]
Severity HIGH
9.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:S/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2019-19699 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/SpengeSec/CVE-2019-19699
View Code
MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK
Complexity LOW
Privileges N/A
Interaction NONE
CVSS Vector String CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Stack

No specific products linked.