CVE-2019-17106

Description

In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.

Affected packages (1)

• Packagist/centreon/centreonfrom 0, < 2.8.30

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2019-17106
• PATCHhttps://github.com/centreon/centreon-archived
• WEBhttps://github.com/centreon/centreon-archived/issues/7098
• WEBhttps://github.com/centreon/centreon-archived/pull/9311
• WEBhttps://www.openwall.com/lists/oss-security/2019/10/08/1