Centreon Web SQL Injection Vulnerabilities (CVE-2024-39842/39843) Advisory

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability IDs: - CVE-2024-39842 - CVE-2024-39843 2. Vulnerability Type: - SQL Injection (SQLi) 3. Affected Component: - Centreon Web 4. Affected Versions: - Centreon Web 24.04.6 - Centreon Web 23.10.16 - Centreon Web 23.04.21 - Centreon Web 22.10.24 5. Vulnerability Description: - CVE-2024-39842: SQL injection vulnerability in the contact form, accessible only by users with high privileges. - CVE-2024-39843: SQL injection vulnerability in the contact form, accessible only by users with high privileges. 6. Reporter: - Trend Micro 7. Severity: - HIGH 8. Submission Date: - June 21, 2024 9. Disclosure Date: - September 17, 2024 10. Impact: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 11. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 12. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 13. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 14. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 15. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 16. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 17. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 19. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 20. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 22. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 23. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 24. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 25. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 26. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 27. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 28. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 29. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 30. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 31. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 32. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 33. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 34. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 35. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 36. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 37. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 38. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 39. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 40. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 41. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 42. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 43. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 44. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 45. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 46. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 47. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 48. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 49. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 50. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 51. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 52. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 53. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 54. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 55. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 56. Impact Scope: - CVSS 3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Goal Reached Thanks to every supporter — we hit 100%!

Centreon Web SQL Injection Vulnerabilities (CVE-2024-39842/39843) Advisory