published August 3, 2021
⚠️ A sneaky SQL injection is hiding in the MediaWiki script of Centreon versions before 20.04.14, and it’s just waiting for an unsuspecting setup! Think of this like a customer service desk that accepts customer complaints without verifying their identity — anyone can spill secrets if they know the right phrases to say. With this vulnerability, attackers can execute arbitrary SQL commands just by crafting specific inputs! If exploited, a remote attacker could gain unauthorized access to the database, potentially reading or altering critical information. This could lead to data leaks or even manipulation of the application’s functionality, making it a significant risk for users with vulnerable configurations. Yikes!
Think of this like a customer service desk that accepts customer complaints without verifying their identity — anyone can spill secrets if they know the right phrases to say. With this vulnerability, attackers can execute arbitrary SQL commands just by crafting specific inputs! This vulnerability allows remote unauthenticated attackers to execute arbitrary SQL commands through the `host_name` and `service_description` parameters in a MediaWiki instance when a valid Knowledge Base URL is configured. The proxy feature in `ProceduresProxy.class.php` and `proxy.php` is where the trouble starts!
If exploited, a remote attacker could gain unauthorized access to the database, potentially reading or altering critical information. This could lead to data leaks or even manipulation of the application’s functionality, making it a significant risk for users with vulnerable configurations. Yikes! To mitigate this risk, update your Centreon to versions 20.04.14, 20.10.8, or 21.04.2 to patch this vulnerability. Additionally, ensure that your Knowledge Base URL isn't pointing to any MediaWiki instances unless absolutely necessary. Stay vigilant and audit your configurations regularly! You've got this! Follow these steps to secure your setup and keep those attackers at bay! 🛡️