GitHub Advisoryadvisory · Packagist

GHSA-rx4j-x3fh-9qwg Centreon Sensitive Data Exposure

MEDIUM Published 2022-05-24 Modified 2023-09-25 Official page ↗

Aliases: CVE-2019-17106
Ecosystem: Packagist
Packages: centreon/centreon
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-312
Reviewed: 2023-07-17

Affected packages

• Packagist centreon/centreon: < 2.8.30 → fixed in 2.8.30

Description

In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.

Related

Alias · CVE (1)

CVE-2019-17106 In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external… vulnerability

Weakness · CWE (1)

CWE-312 Cleartext Storage of Sensitive Information weakness

References