Information Exposure Affecting centreon/centreon package, versions >=18.10.6, <18.10.9>=19.10.0, <19.10.3>=19.04.2, <19.04.7


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.17% (55th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-PHP-CENTREONCENTREON-559335
  • published5 Mar 2020
  • disclosed4 Mar 2020
  • creditUnknown

Introduced: 4 Mar 2020

CVE-2019-17644  (opens in a new tab)
CWE-200  (opens in a new tab)

How to fix?

Upgrade centreon/centreon to version 18.10.9, 19.10.3, 19.04.7 or higher.

Overview

centreon/centreon is a network, system, applicative supervision and monitoring tool.

Affected versions of this package are vulnerable to Information Exposure. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/host/refreshMacroAjax.php.

CVSS Scores

version 3.1