CVE-2019-16406

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p40

Published

Nov 21, 2019 (Nov 21, 2019)

Modified

Jun 17, 2026

Description

Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual machine) files, allowing attackers to gain privileges via a Trojan horse Centreon-autodisco executable file that is launched by cron.

Vendors: centreon
Products: centreon web
Weakness: CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.