CVE-2019-16405

Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.

• http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.htmlRelease Notes, Vendor Advisory
• https://github.com/TheCyberGeek/CVE-2019-16405.rbPatch, Third Party Advisory
• https://github.com/centreon/centreon/pull/7864Issue Tracking, Patch, Third Party Advisory
• https://github.com/centreon/centreon/pull/7884Issue Tracking, Patch, Third Party Advisory
• https://thecybergeek.co.uk/cves/2019/09/17/CVE-2019-16405-06.htmlBroken Link
• https://thecybergeek.co.uk/cves/2019/09/19/CVEs.htmlExploit, Third Party Advisory
• http://packetstormsecurity.com/files/155999/Centreon-19.04-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.htmlRelease Notes, Vendor Advisory
• https://github.com/TheCyberGeek/CVE-2019-16405.rbPatch, Third Party Advisory
• https://github.com/centreon/centreon/pull/7864Issue Tracking, Patch, Third Party Advisory
• https://github.com/centreon/centreon/pull/7884Issue Tracking, Patch, Third Party Advisory
• https://thecybergeek.co.uk/cves/2019/09/17/CVE-2019-16405-06.htmlBroken Link
• https://thecybergeek.co.uk/cves/2019/09/19/CVEs.htmlExploit, Third Party Advisory

Published

Nov 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16399Western Digital WD My Book World through II 1.02.12 suffers …9.8
• CVE-2019-1640A vulnerability in the Cisco Webex Network Recording Player …7.8
• CVE-2019-16400Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number…6.5
• CVE-2019-16401Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number…6.5
• CVE-2019-16403In Webkul Bagisto before 0.1.5, the functionalities for cust…8.8
• CVE-2019-16404Authenticated SQL Injection in interface/forms/eye_mag/js/ey…8.8
• CVE-2019-16406Centreon Web 19.04.4 has weak permissions within the OVA (ak…7.8
• CVE-2019-16407JetBrains ReSharper installers for versions before 2019.2 ha…7.3
• CVE-2019-16409In the Versioned Files module through 2.0.3 for SilverStripe…5.3
• CVE-2019-1641A vulnerability in the Cisco Webex Network Recording Player …7.8
• CVE-2019-16410An issue was discovered in Suricata 4.1.4. By sending multip…9.1
• CVE-2019-16411An issue was discovered in Suricata 4.1.4. By sending multip…9.8