Home > Vulnerability Database > CVE-2020-10945

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2020-10945

Date: May 27, 2020

Centreon before 19.10.7 exposes Session IDs in server responses.

Language: PHP

Severity Score

4.3

Related Resources (10)

Url: https://github.com/centreon/centreon-archived/commit/02a3248602ce194fbb098af34be4652565db2468

Url: https://github.com/centreon/centreon-archived/commit/1c14a8ee07225836bdd2ca480e47a63070a11bb9

Url: https://nvd.nist.gov/vuln/detail/CVE-2020-10945

Url: https://github.com/centreon/centreon-archived/commit/fbee38536960eecaf52eda2bf31b90859c018b66

Url: https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure

Url: https://github.com/centreon/centreon-archived/pull/8291

Url: https://web.archive.org/web/20200625084841/https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure

Url: https://github.com/centreon/centreon-archived/commit/afa0ee6d43d22860ae435163559912696569fc2f

Url: https://github.com/centreon/centreon

Url: https://www.mend.io/vulnerability-database/CVE-2020-10945

Severity Score

4.3

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

CVSS v3.1

Base Score:	4.3
Attack Vector (AV):	ADJACENT_NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	3.3
Access Vector (AV):	ADJACENT
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us