Path Traversal in Merethis Centreon

CVE-2011-4431

Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.036 (88.1th percentile) — read the EPSS interpretation.

Affected products

Merethis Centreon — versions 1.4, 1.4.1, 1.4.2
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (Exploit, x_refsource_MISC)
8530 (x_refsource_SREASON, third-party-advisory)