Centreon web contains an SQL injection vulnerability that allows authenticated attackers to achieve full database compromise, carrying a CVSS score of 8.8.

The vulnerability is an improper neutralization of special elements used in an SQL command (CWE-89) within the monitoring event logs module. An attacker with low-level privileges can manipulate HTTP requests to execute arbitrary SQL commands against the backend database.

The ability to perform SQL injection poses a significant risk to data confidentiality, integrity, and availability. Successful exploitation allows an attacker to bypass security controls, extract sensitive monitoring data, modify system configurations, or potentially execute administrative operations within the database. Given the CVSS score of 8.8, this flaw represents a high-severity risk that could lead to unauthorized system access or complete loss of control over the monitoring environment.

Immediate Action: Update Centreon web to the latest patched versions as specified in the vendor security bulletin.

Proactive Monitoring: Review application and database access logs for anomalous SQL syntax or unexpected query patterns originating from the monitoring event logs module.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns, particularly those targeting parameter inputs on the event logs interface.

Public Exploit Available: No (exploit_available: false)

Organizations utilizing Centreon web must prioritize patching to the versions identified as fixed. Given the high-severity nature of SQL injection and the potential for total impact on the database, immediate application of vendor updates is essential to prevent unauthorized access and potential data exfiltration.