CVE-2018-21023

Vulnerability

The getStats.php script in Centreon Web versions before 2.8.28 and 18.10.5 is vulnerable to authenticated remote code execution. An attacker with valid credentials can inject arbitrary commands through the ns_id parameter, which is not properly sanitized [4].

Exploitation

To exploit this vulnerability, an attacker needs a valid Centreon Web account with at least read access. The attacker sends a specially crafted HTTP request to getStats.php with the ns_id parameter containing malicious input. This input is processed without proper validation, allowing command execution on the server [4].

Impact

Successful exploitation allows the attacker to execute arbitrary operating system commands as the web server user. This can lead to full compromise of the Centreon server, including data exfiltration, installation of backdoors, and lateral movement within the network.

Mitigation

The vulnerability is fixed in Centreon Web versions 2.8.28 and 18.10.5, released in early 2019 [4]. Users should upgrade to these versions or later. No official workarounds are available; upgrading is the recommended action.