A high-severity SQL injection vulnerability in Centreon Infra Monitoring - Open-tickets allows authenticated administrators to compromise the backend database.

This is a SQL injection flaw (CWE-89) located within the notification rules configuration parameters of the Open-tickets module. The vulnerability requires a user with elevated administrative privileges to successfully trigger the malicious SQL execution.

The ability to perform SQL injection allows an attacker to bypass standard application logic, potentially leading to unauthorized data exfiltration, modification, or complete deletion of monitoring data. Given the CVSS score of 7.2, this vulnerability represents a significant risk to the integrity and confidentiality of the monitoring infrastructure. Successful exploitation could disrupt operational visibility and compromise sensitive configuration details stored within the database.

Immediate Action: Upgrade the Open-tickets module to the latest patched version as specified in the official Centreon security bulletin to remediate the injection flaw.

Proactive Monitoring: Review database audit logs for unusual queries or unauthorized attempts to access system tables originating from the Open-tickets module.

Compensating Controls: Ensure that database service accounts operate with the principle of least privilege, restricting the ability of the web application to execute administrative SQL commands.

Public Exploit Available: Unknown.

Organizations utilizing Centreon Infra Monitoring should prioritize updating the Open-tickets module immediately. Although the vulnerability requires authenticated access, internal threats or compromised administrator accounts could leverage this flaw to gain deeper control over the monitoring platform. Apply the patches provided in the vendor release notes to eliminate this risk entirely.