CVE-2019-17643

HIGH 7.5CVE-2019-17643 · Published 04/03/2020 · updated 17/06/2026

In short

CVE-2019-17643 is a HIGH (CVSS 7.5) vulnerability affecting centreon (centreon).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.2% of all vulnerabilities.
Fix: update to 19.04.5, 19.10.2, 18.10.8, 2.8.30 or later.

Package	Affected versions	Patched versions
centreon centreon	`≥ 19.0.0, < 19.04.5≥ 19.04.6, < 19.10.2≥ 2.8.4, < 18.10.8< 2.8.30`	`19.04.519.10.218.10.82.8.30`

Description

An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides sensitive information via an unauthenticated direct request for include/monitoring/recurrentDowntime/GetXMLHost4Services.php.

References

documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10.html · Vendor Advisory
documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html · Vendor Advisory
documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html · Vendor Advisory
documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8.html · Vendor Advisory

More vulnerabilities in centreon

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

centreon

≥ 19.0.0, < 19.04.5≥ 19.04.6, < 19.10.2≥ 2.8.4, < 18.10.8< 2.8.30

19.04.519.10.218.10.82.8.30

More vulnerabilities in centreon

See all →