GCVE - cpe:2.3:a:merethis:centreon:2.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:merethis:centreon:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

Vendor	Merethis (`91c2c9e2-0aba-56b6-b7b3-28df5a8585ee`)
Product	Centreon (`e390c853-3f7f-5471-862c-bafc439895c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/centreon/centreon`	purl2cpe	2026-06-01 10:15:44.365473
`pkg:rpm/opensuse/centreon`	purl2cpe	2026-06-01 10:15:44.365475
`pkg:sourceforge/centreon`	purl2cpe	2026-06-01 10:15:44.365476

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4432`	vulnerable	2026-06-08 04:59:31.074730	Details available www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach. Published: 2011-11-10T00:00:00.000Z Updated: 2024-08-07T00:09:18.344Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt http://securityreason.com/securityalert/8530	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4431`	vulnerable	2026-06-08 04:59:31.061881	Details available Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter. Published: 2011-11-10T00:00:00.000Z Updated: 2024-08-07T00:09:18.326Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt http://securityreason.com/securityalert/8530	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4368`	vulnerable	2026-06-08 04:51:48.239701	Details available Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping tool, (2) traceroute tool, and (3) ldap import, possibly related to improper authentication. Published: 2009-12-21T16:00:00.000Z Updated: 2024-08-07T07:01:20.148Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/37383 http://www.vupen.com/english/advisories/2009/3578 http://www.centreon.com/Development/changelog-2x.html http://osvdb.org/61183 http://secunia.com/advisories/37808	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.