PT-2020-12439 · Centreon · Centreon

Published 2020-05-27 · Updated 2022-05-24 · CVE-2020-10945

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 19.10.7

Description The issue exposes Session IDs in server responses, which could potentially be used to exploit the system.

Recommendations For versions prior to 19.10.7, update to version 19.10.7 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-10945

GHSA-H5QV-P378-3HHR

Affected Products

Centreon

References · 16

• https://osv.dev/vulnerability/GHSA-h5qv-p378-3hhr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10945 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-10945 · Security Note
• https://ubuntu.com/security/CVE-2020-10945 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10945 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-10945 · Vendor Advisory
• https://github.com/centreon/centreon-archived/commit/fbee38536960eecaf52eda2bf31b90859c018b66 · Note
• https://github.com/centreon/centreon-archived/pull/8291 · Note
• https://github.com/centreon/centreon-archived/commit/02a3248602ce194fbb098af34be4652565db2468 · Note
• https://github.com/centreon/centreon-archived/commit/1c14a8ee07225836bdd2ca480e47a63070a11bb9 · Note
• https://github.com/centreon/centreon-archived/commit/afa0ee6d43d22860ae435163559912696569fc2f · Note
• https://github.com/centreon/centreon · Note
• https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure · Note
• https://t.me/cvenotify/4044 · Telegram Post
• https://web.archive.org/web/20200625084841/https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure · Note