Centreon Web: Authenticated SQL injection in ACL management
Centreon Web, an open-source IT monitoring platform, contains an SQL injection flaw in its ACL management (Resources & Actions). An authenticated user with ACL management rights can read and modify the Centreon database. The attacker needs high privileges, so the main risk is a malicious or compromised administrator. The database stores monitoring configuration and credentials for monitored systems.
Centreon · Centreon Web
