CVE-2022-41142

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-41142
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41142.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-41142
Published
2023-01-26T00:00:00Z
Modified
2026-08-12T03:51:39.315083282Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-18304.

Database specific 
{
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41142.json",
    "cna_assigner": "zdi",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "22.04.2"
                },
                {
                    "last_affected": "22.04.2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/centreon/centreon

Affected ranges

Type
GIT
Repo
https://github.com/centreon/centreon
Events
Introduced
369231d57ac0924632dd6af69e8669fc583e4977
Last affected
369231d57ac0924632dd6af69e8669fc583e4977
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:centreon:centreon:22.04.2:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "22.04.2"
        },
        {
            "last_affected": "22.04.2"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

22.*
22.04.2
centreon-web-22.*
centreon-web-22.04.12
centreon-widget-servicegroup-monitoring-22.*
centreon-widget-servicegroup-monitoring-22.04.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41142.json"