CVE-2018-21021

Vulnerability

The img_gantt.php script in Centreon Web versions prior to 2.8.27 is vulnerable to SQL injection. The host_id parameter is not properly sanitized before being used in a SQL query, allowing an attacker to inject arbitrary SQL. This endpoint is accessible without authentication [2].

Exploitation

An attacker can send a crafted HTTP request to img_gantt.php with a malicious host_id parameter containing SQL injection payloads. No prior authentication is required. The request is processed by the vulnerable script, executing the injected SQL commands.

Impact

Successful exploitation allows an attacker to execute arbitrary SQL statements on the Centreon database. This can lead to unauthorized access to sensitive data, including user credentials and monitoring configurations, potentially resulting in full system compromise.

Mitigation

The vulnerability is fixed in Centreon Web version 2.8.27 [2]. Users should upgrade to this version or later. If immediate upgrade is not possible, restrict access to img_gantt.php through web server access controls.