CVE-2011-4431 Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
MediumCVSS 6.5
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merethis centreon | <= 2.3.1 | No fix listed |
| merethis centreon | = 1.4 | No fix listed |
| merethis centreon | = 1.4.1 | No fix listed |
| merethis centreon | = 1.4.2 | No fix listed |
| merethis centreon | = 1.4.2.1 | No fix listed |
| merethis centreon | = 1.4.2.2 | No fix listed |
| merethis centreon | = 1.4.2.3 | No fix listed |
| merethis centreon | = 1.4.2.4 | No fix listed |
| merethis centreon | = 1.4.2.5 | No fix listed |
| merethis centreon | = 1.4.2.6 | No fix listed |
| merethis centreon | = 1.4.2.7 | No fix listed |
| merethis centreon | = 2.0-b2 | No fix listed |
| merethis centreon | = 2.0-b3 | No fix listed |
| merethis centreon | = 2.0-b4 | No fix listed |
| merethis centreon | = 2.0-b5 | No fix listed |
| merethis centreon | = 2.0-b6 | No fix listed |
| merethis centreon | = 2.0-rc1 | No fix listed |
| merethis centreon | = 2.0-rc2 | No fix listed |
| merethis centreon | = 2.0-rc3 | No fix listed |
| merethis centreon | = 2.0-rc4 | No fix listed |
| merethis centreon | = 2.0-rc5 | No fix listed |
| merethis centreon | = 2.0.1 | No fix listed |
| merethis centreon | = 2.0.2 | No fix listed |
| merethis centreon | = 2.1.0 | No fix listed |
| merethis centreon | = 2.1.1 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| merethis centreon | = 2.1.2 | No fix listed |
| merethis centreon | = 2.1.3 | No fix listed |
| merethis centreon | = 2.1.4 | No fix listed |
| merethis centreon | = 2.1.5 | No fix listed |
| merethis centreon | = 2.1.6 | No fix listed |
| merethis centreon | = 2.1.7 | No fix listed |
| merethis centreon | = 2.1.8 | No fix listed |
| merethis centreon | = 2.1.9 | No fix listed |
| merethis centreon | = 2.1.10 | No fix listed |
| merethis centreon | = 2.1.11 | No fix listed |
| merethis centreon | = 2.1.12 | No fix listed |
| merethis centreon | = 2.1.13 | No fix listed |
| merethis centreon | = 2.2 | No fix listed |
| merethis centreon | = 2.2-b1 | No fix listed |
| merethis centreon | = 2.2-rc1 | No fix listed |
| merethis centreon | = 2.2-rc2 | No fix listed |
| merethis centreon | = 2.2.1 | No fix listed |
| merethis centreon | = 2.2.2 | No fix listed |
| merethis centreon | = 2.3.0 | No fix listed |
| merethis centreon | = 2.3.0-rc3 | No fix listed |
References
- 8530 third-party-advisory
- www.trustwave.com exploit