CVE-2018-19271

Vulnerability

Centreon versions 3.4.x are affected by a SQL injection vulnerability in the main.php endpoint via the searchH parameter [1]. The flaw was addressed in Centreon 18.10.0 and Centreon web 2.8.28 [1][4]. The issue originates from insufficient filtering of user-supplied input on the host list page [3][4].

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to main.php with a malicious searchH parameter. No authentication is explicitly required by the description, but typical Centreon deployments require access to the web interface. The attacker must be able to reach the vulnerable endpoint; a simple GET or POST request with a SQL payload in the searchH parameter is sufficient to trigger the injection [1].

Impact

Successful exploitation allows an attacker to perform SQL injection against the Centreon database. This can lead to unauthorized access to, modification of, or deletion of sensitive monitoring data, including credentials and configuration. In some cases, SQL injection may be leveraged to achieve remote code execution or privilege escalation, depending on database permissions [1].

Mitigation

The vulnerability is fixed in Centreon 18.10.0 (released November 2018) and Centreon web 2.8.28 [1][2][4]. Users running Centreon 3.4.x should upgrade to these or later versions immediately. The security fix included adding SQL sanitization filters on the host list page parameters (hostgroup, poller, template, status) [3]. No workarounds are documented; upgrading is the recommended action.