CVE-2019-13024
HIGHCentreon 18.x < 18.10.6, 19.x < 19.04.3 - Authenticated Remote Code Execution via Monitoring Engine Binary Configuration
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2019-13024. PoCs published by Starry Sky, Askar, mhaskar.
AI-analyzed exploit summary This script is a brute-force tool for Centreon API 19.04.0, targeting the authentication endpoint to discover valid credentials. It does not exploit CVE-2019-13024 but instead performs credential brute-forcing.
Description
Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "init_script"-"Monitoring Engine Binary" in main.get.php to insert a arbitrary command into the database, and execute it by calling the vulnerable page www/include/configuration/configGenerate/xml/generateFiles.php (which passes the inserted value to the database to shell_exec without sanitizing it, allowing one to execute system arbitrary commands).
Exploits (4)
This script is a brute-force tool for Centreon API 19.04.0, targeting the authentication endpoint to discover valid credentials. It does not exploit CVE-2019-13024 but instead performs credential brute-forcing.
This exploit targets Centreon v19.04 by leveraging authenticated RCE via poller configuration manipulation. It injects a reverse shell payload into the 'nagios_bin' parameter and triggers execution by generating configuration files.
This repository contains a functional Python exploit for CVE-2019-13024, an authenticated remote code execution vulnerability in Centreon v19.04. The exploit authenticates to the target, retrieves CSRF tokens, injects a malicious payload into the poller configuration, and triggers execution via XML generation.
This repository contains a functional Python exploit for CVE-2019-13024, targeting Centreon versions before 19.04.3. The exploit authenticates to the Centreon web interface, injects a malicious command into the poller configuration, and triggers its execution via XML generation.
References (6)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H