What is GHSA-h5qv-p378-3hhr?

GHSA-h5qv-p378-3hhr is a security advisory published by GitHub Security Advisories with Medium severity. Centreon Sensitive Data Exposure vulnerability

Which CVE IDs does GHSA-h5qv-p378-3hhr cover?

GHSA-h5qv-p378-3hhr covers the following CVE IDs: CVE-2020-10945. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h5qv-p378-3hhr?

GHSA-h5qv-p378-3hhr has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-h5qv-p378-3hhr?

GHSA-h5qv-p378-3hhr affects 4 products, including: composer/centreon/centreon:\u003e= 19.10.0, \u003c 19.10.7; composer/centreon/centreon:\u003e= 19.0.0, \u003c 19.04.10; composer/centreon/centreon:\u003e= 18.0.0, \u003c 18.10.11; composer/centreon/centreon:\u003c 2.8.32.

GHSA-h5qv-p378-3hhrMediumCVSS 4.3

Centreon Sensitive Data Exposure vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 17, 2023

🔗 CVE IDs covered (1)

CVE-2020-10945 →

📋 Description

Centreon before 19.10.7 exposes Session IDs in server responses.

🎯 Affected products4

composer/centreon/centreon:>= 19.10.0, < 19.10.7
composer/centreon/centreon:>= 19.0.0, < 19.04.10
composer/centreon/centreon:>= 18.0.0, < 18.10.11
composer/centreon/centreon:< 2.8.32

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2020-10945
https://github.com/centreon/centreon-archived/pull/8291
https://github.com/centreon/centreon-archived/commit/02a3248602ce194fbb098af34be4652565db2468
https://github.com/centreon/centreon-archived/commit/1c14a8ee07225836bdd2ca480e47a63070a11bb9
https://github.com/centreon/centreon-archived/commit/afa0ee6d43d22860ae435163559912696569fc2f
https://github.com/centreon/centreon-archived/commit/fbee38536960eecaf52eda2bf31b90859c018b66
https://web.archive.org/web/20200625084841/https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure/
https://github.com/advisories/GHSA-h5qv-p378-3hhr