Centreon CVE-2019-17104

HIGH

Reliance on Cookies without Validation and Integrity Checking (CWE-565)

2019-10-08 cve@mitre.org

Apache Information Disclosure Centreon Centreon Vm

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Oct 08, 2019 - 13:15 nvd

HIGH 7.5

DescriptionNVD

In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.

AnalysisAI

In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-565. In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set. Affected products include: Centreon Centreon Vm. Version information: through 19.04.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Centreon

View all

CVE-2014-3829 CRITICAL Emergency POC

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remot

CVE-2014-3828 CRITICAL Emergency POC

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3

CVE-2021-37558 CRITICAL Act Now POC

A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unau

CVE-2022-40043 HIGH This Week POC

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter

CVE-2021-37557 HIGH This Week POC

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authen

CVE-2021-37556 HIGH This Week POC

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authen

CVE-2020-13252 HIGH This Week POC

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRD

CVE-2020-9463 HIGH This Week POC

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server

CVE-2019-17501 HIGH This Week POC

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (

CVE-2019-17107 HIGH This Week POC

minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the comman

CVE-2019-13024 HIGH This Week POC

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitra

CVE-2018-19312 HIGH This Week POC

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to th

Same weakness CWE-565 – Reliance on Cookies without Validation and Integrity Checking

View all

CVE-2026-0257 HIGH POC

CVE-2022-50926 CRITICAL POC

CVE-2025-65212 CRITICAL POC

CVE-2023-35885 CRITICAL POC

CVE-2022-38297 CRITICAL POC

CVE-2017-6896 HIGH POC

CVE-2024-55211 HIGH POC

CVE-2018-19224 HIGH POC

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

CVE-2021-34523 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

Share

CVE-2019-17104 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy