CVE-2018-21020

EUVD-2018-13543
In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechanisms in place.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Affected Products (NVD)
VendorProductVersion
centreoncentreon_web
𝑥
< 2.8.27
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/pull/7084
https://www.openwall.com/lists/oss-security/2019/10/08/1
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/pull/7084
https://www.openwall.com/lists/oss-security/2019/10/08/1