Lucene search

K
nvd[email protected]NVD:CVE-2020-10945
HistoryMay 27, 2020 - 4:15 p.m.

CVE-2020-10945

2020-05-2716:15:12
CWE-200
web.nvd.nist.gov
3

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

25.0%

Centreon before 19.10.7 exposes Session IDs in server responses.

Affected configurations

Nvd
Node
centreoncentreonRange2.8.2
OR
centreoncentreonRange18.10.018.10.11
OR
centreoncentreonRange19.04.019.04.10
OR
centreoncentreonRange19.1019.10.7
OR
centreonwidget-host-monitoringRange<1.6.4
OR
centreonwidget-host-monitoringRange18.10.018.10.3
OR
centreonwidget-host-monitoringRange19.04.019.04.3
OR
centreonwidget-host-monitoringMatch19.10.0
VendorProductVersionCPE
centreoncentreon*cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*
centreonwidget-host-monitoring*cpe:2.3:a:centreon:widget-host-monitoring:*:*:*:*:*:*:*:*
centreonwidget-host-monitoring19.10.0cpe:2.3:a:centreon:widget-host-monitoring:19.10.0:*:*:*:*:*:*:*

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

25.0%