Centreon Infra Monitoring Open-Tickets SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Centreon Infra Monitoring - Open-tickets, specifically within the Notification rules configuration parameters and Open tickets modules. This vulnerability allows users with elevated privileges to manipulate SQL commands, potentially leading to unauthorized data access or modification. The issue affects Centreon versions 24.10.0 prior to 24.10.5, 24.04.0 prior to 24.04.5, and 23.10.0 prior to 23.10.4.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Remediation

Users can upgrade to Centreon versions 24.10.5, 24.04.5, or 23.10.4 to address this vulnerability.