GHSA-h5qv-p378-3hhrmedium4.3
Centreon Sensitive Data Exposure vulnerability
Impact
Centreon before 19.10.7 exposes Session IDs in server responses.
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
centreon/centreon Packagist
| Affected range | Recorded fix |
|---|---|
| From 19.10.0 before 19.10.7Ecosystem versions | 19.10.7 |
| From 19.0.0 before 19.04.10Ecosystem versions | 19.04.10 |
| From 18.0.0 before 18.10.11Ecosystem versions | 18.10.11 |
| Earlier releases before 2.8.32Ecosystem versions | 2.8.32 |
Version evidence: OSV · GHSA-h5qv-p378-3hhr
View original version evidence (0 explicit versions)
Original source description
Centreon before 19.10.7 exposes Session IDs in server responses.
References
- Security advisory nvd.nist.gov/vuln/detail/CVE-2020-10945
- Patch github.com/centreon/centreon-archived/pull/8291
- Patch github.com/centreon/centreon-archived/commit/02a3248602ce194fbb098af34be4652565db2468
- Patch github.com/centreon/centreon-archived/commit/1c14a8ee07225836bdd2ca480e47a63070a11bb9
- Patch github.com/centreon/centreon-archived/commit/afa0ee6d43d22860ae435163559912696569fc2f
- Patch github.com/centreon/centreon-archived/commit/fbee38536960eecaf52eda2bf31b90859c018b66
- Source reference github.com/centreon/centreon
- Security advisory web.archive.org/web/20200625084841/https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure