Authentication Bypass

centreon/centreon is vulnerable to authentication bypass. Changing a password on a profile page by a valid user causes the contactautologinkey value in database filed to be blank instead of NULL, allowing to partially bypass the authentication...

CVE-2019-15299: Improper Authentication

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contactautologinkey field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication...