CVE-2019-17107

PoC —

CVSS 3.1

8.8 high

EPSS

4%p89

Published

Oct 8, 2019 (Oct 8, 2019)

Modified

Jun 17, 2026

Description

minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the command_hostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect.

Vendors: centreon
Products: centreon web
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.