centreon vm vulnerabilities

Latest centreon vm CVEs

Newest publication first

1. CVE-2019-17104 Centreon Does Not Set HTTPOnly Flag

   Published 2019-10-08

   High·CVSS 7.5 EPSS 1.9%

   In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.

2. CVE-2018-21025 Centreon Privilege Escalation

   Published 2019-10-08

   Critical·CVSS 9.8 EPSS 2.8%

   In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.