PT-2019-14572 · Centreon · Centreon

Publicado 2019-11-26 · Atualizado 2019-12-05 · CVE-2019-16195

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 2.8.30 Centreon versions 18.x prior to 18.10.8 Centreon versions 19.x prior to 19.04.5

Description The issue allows for cross-site scripting (XSS) attacks via the myAccount alias and name fields. This could potentially lead to malicious scripts being executed on the user's browser.

Recommendations For Centreon versions prior to 2.8.30, update to version 2.8.30 or later. For Centreon versions 18.x prior to 18.10.8, update to version 18.10.8 or later. For Centreon versions 19.x prior to 19.04.5, update to version 19.04.5 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-16195

Produtos afetados

Centreon

Referências · 7

• https://github.com/centreon/centreon/pull/7876 · Correção
• https://github.com/centreon/centreon/pull/7877 · Correção
• https://github.com/centreon/centreon/releases/tag/18.10.8 · Nota
• https://github.com/centreon/centreon/releases/tag/19.04.5 · Nota
• https://github.com/centreon/centreon/releases/tag/2.8.30 · Nota
• https://osv.dev/vulnerability/CVE-2019-16195 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-16195 · Nota de Segurança