Unrated severityNVD Advisory· Published May 4, 2021· Updated Aug 3, 2024

CVE-2021-26804

Description

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.

Affected products

Centreon/Webdescription
Centreon/Centreonllm-fuzzy
Range: 19.10.18, 20.04.8, 20.10.2

Patches

Vulnerability mechanics

References

medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000