Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| centreon/centreon(Packagist) | 0 | 18.10.8 | N/A |
| centreon/centreon(Packagist) | 19.0.0 | 19.04.5 | N/A |
CVSS Metrics
