{"id":"GHSA-4f26-v6fr-9hmp","summary":"Improper Input Validation in Centreon Web","details":"Centreon Web 19.04.4 allows Remote Code Execution by an administrator who can modify Macro Expression location settings.","aliases":["CVE-2019-16405"],"modified":"2026-09-10T03:49:06.382966755Z","published":"2021-07-28T17:52:45Z","database_specific":{"cwe_ids":["CWE-20"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2021-07-27T15:34:21Z","nvd_published_at":"2019-11-21T18:15:00Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16405"},{"type":"WEB","url":"https://github.com/centreon/centreon/pull/7864"},{"type":"WEB","url":"https://github.com/centreon/centreon/pull/7884"},{"type":"WEB","url":"https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html"},{"type":"WEB","url":"https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html"},{"type":"WEB","url":"https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html"},{"type":"WEB","url":"https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.html"},{"type":"WEB","url":"https://github.com/TheCyberGeek/CVE-2019-16405.rb"},{"type":"PACKAGE","url":"https://github.com/centreon/centreon"},{"type":"WEB","url":"https://github.com/centreon/centreon/releases/tag/19.04.5"},{"type":"WEB","url":"https://thecybergeek.co.uk/cves/2019/09/17/CVE-2019-16405-06.html"},{"type":"WEB","url":"https://thecybergeek.co.uk/cves/2019/09/19/CVEs.html"},{"type":"WEB","url":"http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.html"}],"affected":[{"package":{"name":"centreon/centreon","ecosystem":"Packagist","purl":"pkg:composer/centreon/centreon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.10.8"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/07/GHSA-4f26-v6fr-9hmp/GHSA-4f26-v6fr-9hmp.json"}},{"package":{"name":"centreon/centreon","ecosystem":"Packagist","purl":"pkg:composer/centreon/centreon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0.0"},{"fixed":"19.04.5"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/07/GHSA-4f26-v6fr-9hmp/GHSA-4f26-v6fr-9hmp.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}