Centreon Authentication Mechanism Security Bypass Vulnerability
BID:37383
Info
Centreon Authentication Mechanism Security Bypass Vulnerability
| Bugtraq ID: | 37383 |
| Class: | Design Error |
| CVE: |
CVE-2009-4368 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2009 12:00AM |
| Updated: | Apr 13 2015 09:05PM |
| Credit: | Julien Cayssol |
| Vulnerable: |
Centreon Centreon 2.1.3 Centreon Centreon 2.1.2 Centreon Centreon 2.1.1 Centreon Centreon 2.0.2 Centreon Centreon 2.0.1 Centreon Centreon 2.0.RC5 Centreon Centreon 2.0.RC4 Centreon Centreon 2.0.RC3 Centreon Centreon 2.0.RC2 Centreon Centreon 2.0.RC1 Centreon Centreon 2.0 |
| Not Vulnerable: |
Centreon Centreon 2.1.4 |
Discussion
Centreon Authentication Mechanism Security Bypass Vulnerability
Centreon is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to certain functionality, which may lead to further attacks.
Versions prior to Centreon 2.1.4 are vulnerable.
Centreon is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to certain functionality, which may lead to further attacks.
Versions prior to Centreon 2.1.4 are vulnerable.
Exploit / POC
Centreon Authentication Mechanism Security Bypass Vulnerability
An attacker can exploit this issue through a browser.
An attacker can exploit this issue through a browser.
Solution / Fix
Centreon Authentication Mechanism Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Centreon Authentication Mechanism Security Bypass Vulnerability
References:
References:
- Centreon 2.x changelog (Centreon)
- Centreon Homepage (Centreon)