Description
Centreon before 19.10.7 exposes Session IDs in server responses.
References (1)
Core 1
Core References
Various Sources x_refsource_misc
https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure
Scores
CVSS v3
4.3
EPSS
0.0060
EPSS Percentile
44.1%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (4)
centreon/centreon
< 2.8.2
centreon/centreon
19.10.0 - 19.10.7Packagist
centreon/widget-host-monitoring
19.10.0
centreon/widget-host-monitoring
< 1.6.4
Published
May 27, 2020
Tracked Since
Feb 18, 2026