Centreon Does Not Set HTTPOnly Flag
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-17104US | high7.5 | — | ||
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://docs.centreon.com/current/en/administration/secure-platform.html#securing-the-apache-web-serverWEB
- https://github.com/centreon/centreon-archivedPACKAGE
- https://github.com/centreon/centreon-archived/issues/7097WEB
- https://nvd.nist.gov/vuln/detail/CVE-2019-17104ADVISORY
- https://www.openwall.com/lists/oss-security/2019/10/08/1WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan