We found several XSS vulnerabilities in Centreon, a popular monitoring solution.

We found a vulneability in Centreon, the popular monitoring solution: the application exposes user session ID in some server responses.

Combined with other vulnerabilities (like CVE-2020-10946), this can lead to critical exploitation scenarios.

Pour ne pas perdre la main, formez-vous aux enjeux de la cybersécurité grâce à nos différents programmes à distance, adaptés à vos besoins et votre niveau.

Following our disclosure of a vulnerability against Unraid, we prepared a Metasploit module to make testing and exploitation easier.

Today, it got merged in the master branch of Metasploit and should reach you out once you update your Metasploit installation.