CVE-2019-17642

An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/views/scan/ajax/call.php in the Autodiscovery plugin.

• CWE-78
• CWE-352

• https://documentation.centreon.com/docs/centreon-auto-discovery/en/latest/release_notes/18.10/centreon-auto-discovery-18.10.8.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon-auto-discovery/en/latest/release_notes/19.04/centreon-auto-discovery-19.04.2.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon-auto-discovery/en/latest/release_notes/19.10/centreon-auto-discovery-19.10.1.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10/index.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon-auto-discovery/en/latest/release_notes/18.10/centreon-auto-discovery-18.10.8.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon-auto-discovery/en/latest/release_notes/19.04/centreon-auto-discovery-19.04.2.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon-auto-discovery/en/latest/release_notes/19.10/centreon-auto-discovery-19.10.1.htmlRelease Notes, Vendor Advisory
• https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10/index.htmlRelease Notes, Vendor Advisory

Published

Mar 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17636In Eclipse Theia versions 0.3.9 through 0.15.0, one of the d…8.1
• CVE-2019-17637In all versions of Eclipse Web Tools Platform through releas…7.1
• CVE-2019-17638In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200…9.4
• CVE-2019-17639In Eclipse OpenJ9 prior to version 0.21 on Power platforms, …5.3
• CVE-2019-1764A vulnerability in the web-based management interface of Ses…8.1
• CVE-2019-17640In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0…9.8
• CVE-2019-17643An issue was discovered in Centreon before 2.8-30,18.10-8, 1…7.5
• CVE-2019-17644An issue was discovered in Centreon before 2.8-30, 18.10-8, …7.5
• CVE-2019-17645An issue was discovered in Centreon before 2.8.31, 18.10.9, …7.5
• CVE-2019-17646An issue was discovered in Centreon before 18.10.8, 19.04.5,…7.5
• CVE-2019-17647An issue was discovered in Centreon before 2.8.30, 18.10.8, …9.8
• CVE-2019-1765A vulnerability in the web-based management interface of Ses…8.1