Vulnerability Details CVE-2021-26804
Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.2%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
Products affected by CVE-2021-26804
-
cpe:2.3:a:centreon:centreon_web:19.10.18
-
cpe:2.3:a:centreon:centreon_web:20.04.8
-
cpe:2.3:a:centreon:centreon_web:20.10.2