CVE-2019-17104

EUVD-2022-4251
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Affected Products (NVD)
VendorProductVersion
centreoncentreon_vm
𝑥
≤ 19.04.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/issues/7097
https://www.openwall.com/lists/oss-security/2019/10/08/1
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/issues/7097
https://www.openwall.com/lists/oss-security/2019/10/08/1