Release 20250800 #5713

tuntoja · 2025-08-20T07:30:00Z

Release 20250800

Co-authored-by: Jochen Platzgummer <jochen.platzgummer@pgum.eu> Refs: CTOR-1786

Co-authored-by: Sophie Depassio <sdepassio@centreon.com>

because ApplicationInsights fatpacked plugin (and others) lacked a module Refs: CTOR-1193

* Fix cluster-name filter to support regexp * Improve error message Refs: CTOR-1784

Refs: CTOR-1512 Co-authored-by: Roman Morandell <46994680+rmorandell-pgum@users.noreply.github.com> Co-authored-by: pkippes <pkippes@centreon.com>

…scovery module (#5639) Refs: CTOR-1200 Co-authored-by: Evan-Adam <152897682+Evan-Adam@users.noreply.github.com>

Refs: CTOR-1780

Refs: CTOR-1777

…and fix notification output (#5388) Refs: MON-155920

…certs and key parameters (#5674) Co-authored-by: Mathias Top <mathias.top@epitech.eu>

…onent option not functional (#5678) Co-authored-by: Lucie Dubrunfaut <ldubrunfaut@CNTR-PORT-A198.localdomain>

… a new authentication way (#5698)

…ption to ignore acknowledge messages (#5700) Co-authored-by: garnier-quentin <garnier.quentin@gmail.com> Co-authored-by: pkippes <pkippes@centreon.com>

…mm-discovery (#5707) Refs: CTOR-1852

Refs: CTOR-1677

…g latencetech restapi (#5706) Co-authored-by: thibaults-centreon <tscheitenberger@centreon.com> Co-authored-by: omercier <32134301+omercier@users.noreply.github.com>

github-actions · 2025-08-20T08:10:56Z

Checkmarx One – Scan Summary & Details – 548884a1-754b-4993-bd9e-f4747071436f

New Issues (162)

Checkmarx found the following issues in this Pull Request

Issue	Source File / Package	Checkmarx Insight
Second_Order_SQL_Injection	/src/database/oracle/mode/tablespaceusage.pm: 557	details Method at line 557 of /src/database/oracle/mode/tablespaceusage.pm gets database data from the query element. This element’s value then flows th... `ID: vFJMNsEHt054ihGmFzOtIpMztnw%3D` Attack Vector
Second_Order_SQL_Injection	/src/apps/centreon/sql/mode/multiservices.pm: 380	details Method at line 380 of /src/apps/centreon/sql/mode/multiservices.pm gets database data from the query element. This element’s value then flows th... `ID: 8Z6OAEyu2%2By7bp%2BbhDi0F%2Bgh4a4%3D` Attack Vector
Second_Order_SQL_Injection	/src/apps/centreon/sql/mode/multiservices.pm: 445	details Method at line 445 of /src/apps/centreon/sql/mode/multiservices.pm gets database data from the query element. This element’s value then flows th... `ID: 0cV2Quw0hUmDu8ka%2FwNv7sEokXY%3D` Attack Vector
Second_Order_SQL_Injection	/src/database/oracle/mode/tablespaceusage.pm: 265	details Method at line 265 of /src/database/oracle/mode/tablespaceusage.pm gets database data from the query element. This element’s value then flows th... `ID: QhaT8l0BVd3oVl0CqaE6R%2Bi9VoY%3D` Attack Vector
Second_Order_SQL_Injection	/src/centreon/common/protocols/sql/mode/collection.pm: 219	details Method at line 219 of /src/centreon/common/protocols/sql/mode/collection.pm gets database data from the query element. This element’s value then... `ID: 9MQk1%2BeRi3nX8gEPvG6gQQ8bJ48%3D` Attack Vector
Second_Order_SQL_Injection	/src/apps/backup/arcserve/udp/mssql/mode/jobstatus.pm: 155	details Method at line 155 of /src/apps/backup/arcserve/udp/mssql/mode/jobstatus.pm gets database data from the query element. This element’s value then... `ID: AnFpKKTlU2iBdTQEN6KwIK11ihs%3D` Attack Vector
CVE-2025-53864	Maven-com.google.code.gson:gson-2.8.9	details Recommended version: 2.12.0 Description: Connect2id Nimbus JOSE + JWT allows a remote attacker to cause a Denial-of-Service (DoS) via a deeply nested JSON object supplied in a JWT claim se... Attack Vector: NETWORK Attack Complexity: LOW `ID: T5pZPVHeiL5uo9f9FmxhpSe%2Br4mBXuq7GgtwlbAMvaw%3D` Vulnerable Package
Privacy_Violation	/tests/cpan-libraries/json-path.pl: 13	details Method at line 13 of /tests/cpan-libraries/json-path.pl sends user information outside the application. This may constitute a Privacy Violation. `ID: TlskuLoh7%2BEEklvY%2BQNyXvLPL7s%3D` Attack Vector
Privacy_Violation	/connectors/vmware/src/centreon/script/centreon_vmware.pm: 282	details Method at line 282 of /connectors/vmware/src/centreon/script/centreon_vmware.pm sends user information outside the application. This may consti... `ID: 8TPFByfYSodLQfc9xC8W6B0ZcNE%3D` Attack Vector
Privacy_Violation	/connectors/vmware/src/centreon/script/centreon_vmware.pm: 270	details Method at line 270 of /connectors/vmware/src/centreon/script/centreon_vmware.pm sends user information outside the application. This may consti... `ID: E2cM7vBDc8rtDe5BIPv41Pop%2BaI%3D` Attack Vector
Privacy_Violation	/tests/cpan-libraries/json-path.pl: 12	details Method at line 12 of /tests/cpan-libraries/json-path.pl sends user information outside the application. This may constitute a Privacy Violation. `ID: MH6Oehm0PUKoLYjUP0X%2Fn3AwSEI%3D` Attack Vector
Privacy_Violation	/tests/cpan-libraries/json-path.pl: 11	details Method at line 11 of /tests/cpan-libraries/json-path.pl sends user information outside the application. This may constitute a Privacy Violation. `ID: %2FzxRGKuvTL4r3V4NkYb87Jzp85w%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/paws.pm: 107	details Method at line 107 of /src/cloud/aws/custom/paws.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: PojktvF%2BOw%2F7H6XfppPRQvZWbQU%3D` Attack Vector
Privacy_Violation	/tests/cpan-libraries/json-path.pl: 10	details Method at line 10 of /tests/cpan-libraries/json-path.pl sends user information outside the application. This may constitute a Privacy Violation. `ID: ST9ruLup6MNiPC6W%2BP80BwJ7YF0%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/paws.pm: 110	details Method at line 110 of /src/cloud/aws/custom/paws.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: 9ct%2B2FSNYF%2BxZGo%2FoYGGz7yA0%2BY%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 210	details Method at line 210 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: z%2BRNopWUKdVrsws4Xo91KNWG22g%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 212	details Method at line 212 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: BT02F05T%2BswcS6KSPYLVSJDsQ3U%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 211	details Method at line 211 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: sq9jP8f%2FzmqQ2Ul9tDnVI2Vjz08%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 127	details Method at line 127 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: wUcbn7Q1ZUJd%2BEy3W%2FnuEu3pkYU%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 124	details Method at line 124 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: QgjWkVzwfuRzBDAq5Cy1YyKFyvk%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 124	details Method at line 124 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: VZnL4Wzc6n9FH3m8Atdqg8%2FjmVU%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 127	details Method at line 127 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: bZb2kjlARFvuCZ%2Bgapbg%2Ffjc1Zc%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/awscli.pm: 124	details Method at line 124 of /src/cloud/aws/custom/awscli.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: VeN9DLk0VFm7svT%2B31WRvzDCK%2Fk%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/paws.pm: 110	details Method at line 110 of /src/cloud/aws/custom/paws.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: RZIcJb0K9hK7A8m4tZrPT4aNCdw%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/paws.pm: 107	details Method at line 107 of /src/cloud/aws/custom/paws.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: i2ygI6PmxJBGIjjfGyWbGolIedM%3D` Attack Vector
Privacy_Violation	/src/cloud/aws/custom/paws.pm: 107	details Method at line 107 of /src/cloud/aws/custom/paws.pm sends user information outside the application. This may constitute a Privacy Violation. `ID: dCdE9AYCzcRydbADxFIv0Qnlt3E%3D` Attack Vector
Resource_Injection	/connectors/vmware/src/centreon/script/centreon_vmware.pm: 669	details The application's method, at line 669 of /connectors/vmware/src/centreon/script/centreon_vmware.pm, opens a resource using potentially tainted v... `ID: chH3WKuVfLVePFXTKMYH4mHcnbA%3D` Attack Vector
Use_Of_Hardcoded_Password	/src/centreon/plugins/backend/ssh/libssh.pm: 88	details The application uses the hard-coded password "SSH_AUTH_SUCCESS" for authentication purposes, either using it to verify users' identities, or to ... `ID: 8d3T%2Bhjc1KYSOSK5fKFatkoJ7UA%3D` Attack Vector
Use_Of_Hardcoded_Password	/tests/cpan-libraries/libssh-session.pl: 83	details The application uses the hard-coded password "testpassword" for authentication purposes, either using it to verify users' identities, or to access... `ID: mjRUMZYj7vtxogYyLcMXq4NZXAg%3D` Attack Vector
Use_Of_Hardcoded_Password	/tests/cpan-libraries/crypt-argon2.pl: 8	details The application uses the hard-coded password "my_secure_password" for authentication purposes, either using it to verify users' identities, or t... `ID: bdJ1F%2FaBwrWdbYRanXgHR8Rqf2k%3D` Attack Vector
Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/network/forcepoint/sdwan/snmp/mode/droppedpackets.pm: 100	details In , the application protects sensitive data using a cryptographic algorithm, md5_hex, that is considered weak or even trivially broken, in /src/n... `ID: 4wDmNMh%2BLRIgNBtKEDKStIFOST4%3D` Attack Vector
Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/network/forcepoint/sdwan/snmp/mode/rejectedpackets.pm: 99	details In , the application protects sensitive data using a cryptographic algorithm, md5_hex, that is considered weak or even trivially broken, in /src/n... `ID: fNVp4utwvzyk6PhmBEjnOefAkF8%3D` Attack Vector
Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/network/forcepoint/sdwan/snmp/mode/rejectedpackets.pm: 100	details In , the application protects sensitive data using a cryptographic algorithm, md5_hex, that is considered weak or even trivially broken, in /src/n... `ID: rrN8s7u%2BWCaskMQ466oDD0H8OTQ%3D` Attack Vector
Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/network/forcepoint/sdwan/snmp/mode/droppedpackets.pm: 99	details In , the application protects sensitive data using a cryptographic algorithm, md5_hex, that is considered weak or even trivially broken, in /src/n... `ID: 0N1PGsAnvguFztajtMTUTc3JvG4%3D` Attack Vector
Use_of_Broken_or_Risky_Cryptographic_Algorithm	/tests/scripts/slim_walk.pl: 225	details In , the application protects sensitive data using a cryptographic algorithm, md5, that is considered weak or even trivially broken, in /tests/scri... `ID: 2YtZ9SUn2TAuxEvMvG7Qiz2cDHE%3D` Attack Vector
Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/storage/purestorage/flasharray/v2/restapi/custom/api.pm: 124	details In , the application protects sensitive data using a cryptographic algorithm, md5_hex, that is considered weak or even trivially broken, in /src/s... `ID: b%2BinRoFaGA7qerilFg8R4P3B1nE%3D` Attack Vector

More results are available on the CxOne platform

Fixed Issues (24)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	~~Dangerous_Functions~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 27
	~~Dangerous_Functions~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 21
	~~Dangerous_Functions~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 20
	~~Dangerous_Functions~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 52
	~~Dangerous_Functions~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 54
	~~Dangerous_Functions~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 49
	~~Use_of_Broken_or_Risky_Cryptographic_Algorithm~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/utils/BlowFishUtils.java: 66
	~~Use_of_Broken_or_Risky_Cryptographic_Algorithm~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/utils/BlowFishUtils.java: 74
	~~Use_of_Hard_coded_Cryptographic_Key~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/utils/BlowFishUtils.java: 35
	~~Use_of_Hard_coded_Cryptographic_Key~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/utils/BlowFishUtils.java: 35
	~~Heap_Inspection~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/parser/OptionFactory.java: 55
	~~Heap_Inspection~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/daemon/MapIdentityManager.java: 75
	~~Heap_Inspection~~	/as400/connector.as400/src/main/java/com/centreon/connector/as400/daemon/MapIdentityManager.java: 76
	~~Heap_Inspection~~	/dependencies/perl-filesys-smbclient/src/libauthSamba.c: 6
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65
	~~Permissive_Regular_Expression~~	/src/centreon/common/powershell/exchange/powershell.pm: 65

tuntoja and others added 24 commits July 7, 2025 17:36

fix(ci): run plugins-suoders delivery only if packaging is triggered (#…

8f43607

…5663)

Merge branch 'master' into sync-release-20250700

25ed744

Sync release 20250700 (#5664)

968b620

fix(release): update plugins version to 20250800

b48e8ed

fix(release): update plugins version to 20250800 (#5668)

8a0270b

fix(hardware::server::hp::ilo::restapi): exclude enclosure CTOR-1798 (#…

420edcf

…5671)

chore(deps): absorb 2025-07 dependabot GitHub Actions updates (#5654)

de3749d

fix(mosquitto-mqtt): syntax and encoding (#5676)

ea71dd2

Co-authored-by: Jochen Platzgummer <jochen.platzgummer@pgum.eu> Refs: CTOR-1786

enh(notification::email): Allow a custom pathname in alert mode (#5085)

d82058c

Co-authored-by: Sophie Depassio <sdepassio@centreon.com>

fix(packaging): reorganize common code for azure (#5679)

03deb67

because ApplicationInsights fatpacked plugin (and others) lacked a module Refs: CTOR-1193

fix(apps::vmware::connector): Fix cluster-name filter usage (#5672)

e4c27fa

* Fix cluster-name filter to support regexp * Improve error message Refs: CTOR-1784

new(plugin) network::forcepoint::sdwan::snmp (#5669)

af72ad6

Refs: CTOR-1512 Co-authored-by: Roman Morandell <46994680+rmorandell-pgum@users.noreply.github.com> Co-authored-by: pkippes <pkippes@centreon.com>

enh(apps::proxmox::ve::restapi): Add OS and IPs information to autodi…

d4f9625

…scovery module (#5639) Refs: CTOR-1200 Co-authored-by: Evan-Adam <152897682+Evan-Adam@users.noreply.github.com>

fix(centreon_vmware): test if dependencies are installed (#5665)

657c4d0

Refs: CTOR-1780

enh(centreon_vmware): change defaut log severity to error (#5701)

2783d18

Refs: CTOR-1777

fix(notification::microsoft::office365::teams): Modify the URI build …

cfba599

…and fix notification output (#5388) Refs: MON-155920

Plugin(apps::redis::sentinel and database::redis) - Custom(cli): add …

5158211

…certs and key parameters (#5674) Co-authored-by: Mathias Top <mathias.top@epitech.eu>

Plugin(hardware::server::huawei::hmm::snmp) - Mode(hardware): no-comp…

0dd766c

…onent option not functional (#5678) Co-authored-by: Lucie Dubrunfaut <ldubrunfaut@CNTR-PORT-A198.localdomain>

Plugin(apps::monitoring::iplabel::ekara::restapi) - Custom(api) : Add…

0e89634

… a new authentication way (#5698)

CTOR-792 Plugin(os::as400::connector) - Mode(messagequeue) : add an o…

0f8af4d

…ption to ignore acknowledge messages (#5700) Co-authored-by: garnier-quentin <garnier.quentin@gmail.com> Co-authored-by: pkippes <pkippes@centreon.com>

enh(nightly-ci): split created nightly ticket by type of failure (#5705)

27e4995

fix(apps::microsoft::hyperv::2012::local): fix discovery stats in scv…

e800def

…mm-discovery (#5707) Refs: CTOR-1852

fix(os::aix::snmp): mode(list-processes): parsing error (#5710)

120ba85

Refs: CTOR-1677

feat(apps::monitoring::latencetech::restapi): new pack apps monitorin…

f823feb

…g latencetech restapi (#5706) Co-authored-by: thibaults-centreon <tscheitenberger@centreon.com> Co-authored-by: omercier <32134301+omercier@users.noreply.github.com>

tuntoja requested review from a team as code owners August 20, 2025 07:30

tuntoja requested review from kduret and scresto31 August 20, 2025 07:30

tuntoja requested review from jean-christophe81, mushroomempires and sechkem August 20, 2025 07:30

Merge branch 'master' into release-20250800

9d0fd16

github-actions bot added skip-workflow-connector-vmware skip-workflow-as400 skip-workflow-docker-builder-testing-plugins skip-workflow-docker-builder-packaging-plugins labels Aug 20, 2025

github-actions bot added skip-workflow-plugins-analysis skip-workflow-docker-builder-unit-tests skip-workflow-plugins labels Aug 20, 2025

Evan-Adam approved these changes Aug 20, 2025

View reviewed changes

tuntoja merged commit f7483dc into master Aug 20, 2025
139 of 141 checks passed

pkippes deleted the release-20250800 branch September 17, 2025 07:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Release 20250800 #5713

Release 20250800 #5713

Uh oh!

tuntoja commented Aug 20, 2025

Uh oh!

github-actions bot commented Aug 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

Release 20250800 #5713

Release 20250800 #5713

Uh oh!

Conversation

tuntoja commented Aug 20, 2025

Uh oh!

github-actions bot commented Aug 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants