high7.5
CVE-2019-17104
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
Impact
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centreon | Centreon Vm | through 19.04.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2019/10/09/2
- https://github.com/centreon/centreon/issues/7097
- https://www.openwall.com/lists/oss-security/2019/10/08/1
- http://www.openwall.com/lists/oss-security/2019/10/09/2
- https://github.com/centreon/centreon/issues/7097
- https://www.openwall.com/lists/oss-security/2019/10/08/1