CVE-2019-17106

In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
centreoncentreon_web
𝑥
≤ 2.8.29
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/issues/7098
https://www.openwall.com/lists/oss-security/2019/10/08/1
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/issues/7098
https://www.openwall.com/lists/oss-security/2019/10/08/1