7.5
CVSSv3

CVE-2019-17104

Published: 08/10/2019 Updated: 11/10/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

In Centreon VM up to and including 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

centreon centreon vm

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Re: Multiple vulnerabilities in Centreon-Web and Centreon-VM <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Guil ...