CVE-2008-1178: Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a

Unscored severity · published Mar 6, 2008

CVE-2008-1178

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a

–

CVSS

5.2%

EPSS

On KEV

Description

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2008-1119.

Exploitation

Is it being used?

Exploit prediction (EPSS)5.2% · higher than 92% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Centreon · Centreon

through 1.4.2.3; 1.4; 1.4.1; 1.4.2; 1.4.2.1; 1.4.2.2 · source: NVD

Affected product

Centreon

All Centreon CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2008-1178

CVE.org

https://www.cve.org/CVERecord?id=CVE-2008-1178

Vendor Advisory

http://secunia.com/advisories/29158

securityreason.com

http://securityreason.com/securityalert/3715

www.centreon.com

http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html

www.securityfocus.com

http://www.securityfocus.com/archive/1/488956/100/0/threaded

www.securityfocus.com

http://www.securityfocus.com/bid/28052

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/40950