VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 4, 2021· Updated Jun 17, 2026

CVE-2021-26804

CVE-2021-26804

Description

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.

Affected products

5
  • Centreon/Centreon Web3 versions
    cpe:2.3:a:centreon:centreon_web:19.10.18:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:centreon:centreon_web:19.10.18:*:*:*:*:*:*:*
    • cpe:2.3:a:centreon:centreon_web:20.04.8:*:*:*:*:*:*:*
    • cpe:2.3:a:centreon:centreon_web:20.10.2:*:*:*:*:*:*:*
  • Centreon/Webdescription
  • Centreon/Centreonllm-fuzzy
    Range: 19.10.18, 20.04.8, and 20.10.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.