In Centreon Web through 2.8.29, disclosure of external components passwords allows authenticated attackers to move laterally to external components.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Centreon_web | Centreon | * | 2.8.29 (including) |
Potential Mitigations
Related Attack Patterns
References
- http://www.openwall.com/lists/oss-security/2019/10/09/2
- https://github.com/centreon/centreon/issues/7098
- https://www.openwall.com/lists/oss-security/2019/10/08/1
- http://www.openwall.com/lists/oss-security/2019/10/09/2
- https://github.com/centreon/centreon/issues/7098
- https://www.openwall.com/lists/oss-security/2019/10/08/1