Authentication Bypass

2019-10-0905:06:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

43.3%

Centreon Web is vulnerable to authentication bypass. The vulnerability exists due to a type juggling error in centreonAuth.class.php.

CPENameOperatorVersion
centreon/centreonle2.7.3
centreon/centreonle2.99.5

CPE	Name	Operator	Version
	centreon/centreon	le	2.7.3
	centreon/centreon	le	2.99.5

References

www.openwall.com/lists/oss-security/2019/10/09/2

github.com/centreon/centreon/commit/96e48f87c5e4c7cf9de6959a995ee7a8d3e2671e

github.com/centreon/centreon/pull/7084

www.openwall.com/lists/oss-security/2019/10/08/1

0.001 Low

EPSS

Percentile

43.3%

Related for VERACODE:21662