Centreon Sensitive Data Exposure vulnerability

中危 4.3CVE-2020-10945 · GHSA-h5qv-p378-3hhr · Published 27/05/2020 · updated 17/06/2026

要点

CVE-2020-10945 是影响 centreon/centreon, centreon (centreon), widget-host-monitoring (centreon) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：0.56%，高于 46.5% 的漏洞。
修复：升级到 18.10.11, 19.04.10, 19.10.7, 2.8.32 或更高版本。

Package	Affected versions	Patched versions
centreon/centreon Packagist	`≥ 18.0.0, < 18.10.11≥ 19.0.0, < 19.04.10≥ 19.10.0, < 19.10.7< 2.8.32`	`18.10.1119.04.1019.10.72.8.32`
centreon centreon	`≥ 18.10.0, < 18.10.11≥ 19.04.0, < 19.04.10≥ 19.10, < 19.10.7≤ 2.8.2`	`18.10.1119.04.1019.10.7`
widget-host-monitoring centreon	`= 19.10.0≥ 18.10.0, < 18.10.3≥ 19.04.0, < 19.04.3< 1.6.4`	`18.10.319.04.31.6.4`

Centreon before 19.10.7 exposes Session IDs in server responses.

NVD description

Centreon before 19.10.7 exposes Session IDs in server responses.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 18.0.0, < 18.10.11≥ 19.0.0, < 19.04.10≥ 19.10.0, < 19.10.7< 2.8.32

18.10.1119.04.1019.10.72.8.32

≥ 18.10.0, < 18.10.11≥ 19.04.0, < 19.04.10≥ 19.10, < 19.10.7≤ 2.8.2

18.10.1119.04.1019.10.7

= 19.10.0≥ 18.10.0, < 18.10.3≥ 19.04.0, < 19.04.3< 1.6.4

18.10.319.04.31.6.4

centreon/centreon 的其他漏洞

查看全部 →