Skip to content
This repository has been archived by the owner on Dec 13, 2022. It is now read-only.

fix(security): fix RCE on mib import from manufacturer input #8023

Merged
merged 4 commits into from
Oct 30, 2019
Merged

fix(security): fix RCE on mib import from manufacturer input #8023

merged 4 commits into from
Oct 30, 2019

Conversation

kduret
Copy link
Contributor

@kduret kduret commented Oct 22, 2019

Description

Manufacturer id is not protected in MIB import form

Fixes MON-4095

Type of change

  • Patch fixing an issue (non-breaking change)
  • New functionality (non-breaking change)
  • Breaking change (patch or feature) that might cause side effects breaking part of the Software
  • Updating documentation (missing information, typo...)

Target serie

  • 2.8.x
  • 18.10.x
  • 19.04.x
  • 19.10.x (master)

kduret and others added 2 commits October 23, 2019 14:36
@kduret @loiclau
Update www/include/configuration/configObject/traps-mibs/formMibs.php
ffbfc23 
Co-Authored-By: loiclau <loic.lau@gmail.com>
@kduret @callapa
Update www/include/configuration/configObject/traps-mibs/formMibs.php
f8ac5d9 
Co-Authored-By: Laurent Calvet <lcalvet@centreon.com>
@sc979 sc979 requested a review from callapa October 24, 2019 09:57
@kduret kduret merged commit 9c59a0c into master Oct 30, 2019
@kduret kduret deleted the MON-4095-trap-rce branch October 30, 2019 07:33
kduret added a commit that referenced this pull request Oct 30, 2019
@kduret
fix(security): fix RCE on mib import from manufacturer input (#8023)
c8a63c5 
Refs: MON-4095
kduret added a commit that referenced this pull request Oct 30, 2019
@kduret
fix(security): fix RCE on mib import from manufacturer input (#8023)
bbfa2d2 
Refs: MON-4095
kduret added a commit that referenced this pull request Oct 30, 2019
@kduret
fix(security): fix RCE on mib import from manufacturer input (#8023)
bd7b639 
Refs: MON-4095
kduret added a commit that referenced this pull request Oct 30, 2019
@kduret
fix(security): fix RCE on mib import from manufacturer input (#8023)
a203c4c 
Refs: MON-4095
sc979 pushed a commit that referenced this pull request Oct 31, 2019
@kduret @sc979
fix(security): fix RCE on mib import from manufacturer input (#8023)
1e13318 
Refs: MON-4095
callapa pushed a commit that referenced this pull request Nov 12, 2019
@kduret @callapa
fix(security): fix RCE on mib import from manufacturer input (#8023)
675f738 
Refs: MON-4095
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@sc979 sc979 sc979 approved these changes

@loiclau loiclau loiclau approved these changes

@callapa callapa callapa approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@kduret @callapa @loiclau @sc979