~ / search / GHSA-rx4j-x3fh-9qwg

GHSA-rx4j-x3fh-9qwg

Centreon Sensitive Data Exposure

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-17106

Packages

EcosystemPackageAffectedFixed in
Packagist centreon/centreon < 2.8.30 2.8.30

Details

As written in the advisory (Markdown source, shown as plain text).

In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.

References

External links from the advisory. They lead to third-party sites.