CVE-2021-26804
EUVD-2021-1359104.05.2021, 17:15
Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| centreon | centreon_web | 19.10.18 |
| centreon | centreon_web | 20.04.8 |
| centreon | centreon_web | 20.10.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration