2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Meta service indicator page"],"product":"web","vendor":"Centreon","versions":[{"lessThan":"24.10.9","status":"affected","version":"24.10.0","versionType":"semver"},{"lessThan":"24.04.16","status":"affected","version":"24.04.0","versionType":"semver"},{"lessThan":"23.10.26","status":"affected","version":"23.10.0","versionType":"semver"}]}],"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","matchCriteriaId":"C26D15FD-EFFC-48FE-BC84-A518F91148DB","versionEndExcluding":"23.10.26","versionStartIncluding":"23.10.0","vulnerable":true},{"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","matchCriteriaId":"19652073-5857-4F6A-85E0-A2B35E36AA25","versionEndExcluding":"24.04.16","versionStartIncluding":"24.04.0","vulnerable":true},{"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","matchCriteriaId":"F1E5A4E9-BADF-463F-9632-200EFFDC8F36","versionEndExcluding":"24.10.9","versionStartIncluding":"24.10.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"User with high privileges is able to introduce a SQLi using the Meta Service indicator page. Caused by an Improper Neutralization of Special Elements used in an SQL Command.This issue affects web: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, from 23.10.0 before 23.10.26."},{"lang":"es","value":"Un usuario con privilegios elevados puede introducir un SQLi mediante la página indicadora de Metaservicio. Esto se debe a una neutralización incorrecta de elementos especiales utilizados en un comando SQL. Este problema afecta a la web: desde la versión 24.10.0 hasta la 24.10.9, desde la versión 24.04.0 hasta la 24.04.16, desde la versión 23.10.0 hasta la 23.10.26."}],"id":"CVE-2025-4650","lastModified":"2026-06-17T09:33:40.970","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4650","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-08-22T19:01:00.491601Z","version":"2.0.3"}}]},"published":"2025-08-22T19:15:38.980","references":[{"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","tags":["Release Notes"],"url":"https://github.com/centreon/centreon/releases"},{"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","tags":["Vendor Advisory"],"url":"https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-4650-centreon-web-all-versions-high-severity-4901"}],"sourceIdentifier":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","type":"Secondary"}]}
|