CVE-2019-17646

An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/external.php?object=centreonmetric=listByService...

CVE-2019-17646

Centreon before 18.10.8, 19.04.5, and 19.10.2 is affected by an unauthenticated information disclosure via direct request to api/external.php?object=centreon_metric&action=listByService, allowing access to sensitive data. The issue arises in Centreon’s web API exposed without authentication, enab...