Detections
Analytics
SCA: security update for centreon/centreon (GHSA-j5wx-jvw3-j363)
critical Tenable Self-Hosted Container Security Plugin ID 416169
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects
unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of
the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is
293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794
is the identifier assigned to this vulnerability. (CVE-2022-3827)
See Also
Plugin Details
Severity: Critical
ID: 416169
Version: Revision 1.7
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.12
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2022-3827
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 11/2/2022
Vulnerability Publication Date: 11/2/2022
Reference Information
CVE: CVE-2022-3827
cwe: CWE-89