CVE-2019-17104: High severity centreon vulnerability
Published Oct 8, 2019
·Updated
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
Affected Software
2 affected components
composer/centreon/centreon<=19.04.3
Centreon Centreon VM<=19.04.3
Event History
Oct 8, 2019
CVE Published
via MITRE·12:19 PM
Data Sourced
via MITRE·12:19 PM
Description
May 24, 2022
Advisory Published
04:58 PM
Frequently Asked Questions
1
What is the severity of CVE-2019-17104?
The severity of CVE-2019-17104 is considered medium due to the potential for session hijacking.
2
How do I fix CVE-2019-17104?
To fix CVE-2019-17104, ensure that the HTTPOnly flag is set on cookies in the Apache HTTP Server configuration.
3
Which versions are affected by CVE-2019-17104?
CVE-2019-17104 affects Centreon versions up to and including 19.04.3.
4
What does CVE-2019-17104 exploit?
CVE-2019-17104 exploits the lack of the HTTPOnly flag on cookies, making them vulnerable to theft.
5
Is there a workaround for CVE-2019-17104?
A workaround for CVE-2019-17104 involves modifying the Apache HTTP Server cookie settings to include the HTTPOnly flag.