CVE-2019-17106: Cleartext Storage of Sensitive Information

May 24, 2022 (updated July 17, 2023)

In Centreon Web through 2.8.29, disclosure of external components’ passwords allows authenticated attackers to move laterally to external components.

References

github.com/advisories/GHSA-rx4j-x3fh-9qwg
github.com/centreon/centreon-archived/issues/7098
github.com/centreon/centreon-archived/pull/9311
nvd.nist.gov/vuln/detail/CVE-2019-17106
www.openwall.com/lists/oss-security/2019/10/08/1

Detect and mitigate CVE-2019-17106 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →