Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-15299

Опубликовано: 24 фев. 2020
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*
Версия до 19.04.3 (включая)

EPSS

Процентиль: 19%
0.0006
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

github логотип

GHSA-927r-wpc8-9m3x

github
больше 3 лет назад

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.

EPSS

Процентиль: 19%
0.0006
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-287