CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-15299

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 19.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2019-15299

Centreon » Centreon Web » Version: 18.10.0

cpe:2.3:a:centreon:centreon_web:18.10.0
Centreon » Centreon Web » Version: 18.10.1

cpe:2.3:a:centreon:centreon_web:18.10.1
Centreon » Centreon Web » Version: 18.10.10

cpe:2.3:a:centreon:centreon_web:18.10.10
Centreon » Centreon Web » Version: 18.10.11

cpe:2.3:a:centreon:centreon_web:18.10.11
Centreon » Centreon Web » Version: 18.10.12

cpe:2.3:a:centreon:centreon_web:18.10.12
Centreon » Centreon Web » Version: 18.10.2

cpe:2.3:a:centreon:centreon_web:18.10.2
Centreon » Centreon Web » Version: 18.10.3

cpe:2.3:a:centreon:centreon_web:18.10.3
Centreon » Centreon Web » Version: 18.10.4

cpe:2.3:a:centreon:centreon_web:18.10.4
Centreon » Centreon Web » Version: 18.10.5

cpe:2.3:a:centreon:centreon_web:18.10.5
Centreon » Centreon Web » Version: 18.10.6

cpe:2.3:a:centreon:centreon_web:18.10.6
Centreon » Centreon Web » Version: 18.10.7

cpe:2.3:a:centreon:centreon_web:18.10.7
Centreon » Centreon Web » Version: 18.10.8

cpe:2.3:a:centreon:centreon_web:18.10.8
Centreon » Centreon Web » Version: 18.10.9

cpe:2.3:a:centreon:centreon_web:18.10.9
Centreon » Centreon Web » Version: 19.04.0

cpe:2.3:a:centreon:centreon_web:19.04.0
Centreon » Centreon Web » Version: 19.04.1

cpe:2.3:a:centreon:centreon_web:19.04.1
Centreon » Centreon Web » Version: 19.04.2

cpe:2.3:a:centreon:centreon_web:19.04.2
Centreon » Centreon Web » Version: 19.04.3

cpe:2.3:a:centreon:centreon_web:19.04.3
Centreon » Centreon Web » Version: 2.4

cpe:2.3:a:centreon:centreon_web:2.4
Centreon » Centreon Web » Version: 2.4.1

cpe:2.3:a:centreon:centreon_web:2.4.1
Centreon » Centreon Web » Version: 2.4.4

cpe:2.3:a:centreon:centreon_web:2.4.4
Centreon » Centreon Web » Version: 2.4.5

cpe:2.3:a:centreon:centreon_web:2.4.5
Centreon » Centreon Web » Version: 2.5

cpe:2.3:a:centreon:centreon_web:2.5
Centreon » Centreon Web » Version: 2.5.1

cpe:2.3:a:centreon:centreon_web:2.5.1
Centreon » Centreon Web » Version: 2.5.2

cpe:2.3:a:centreon:centreon_web:2.5.2
Centreon » Centreon Web » Version: 2.5.3

cpe:2.3:a:centreon:centreon_web:2.5.3
Centreon » Centreon Web » Version: 2.5.4

cpe:2.3:a:centreon:centreon_web:2.5.4
Centreon » Centreon Web » Version: 2.6.0

cpe:2.3:a:centreon:centreon_web:2.6.0
Centreon » Centreon Web » Version: 2.6.1

cpe:2.3:a:centreon:centreon_web:2.6.1
Centreon » Centreon Web » Version: 2.6.2

cpe:2.3:a:centreon:centreon_web:2.6.2
Centreon » Centreon Web » Version: 2.6.3

cpe:2.3:a:centreon:centreon_web:2.6.3
Centreon » Centreon Web » Version: 2.6.4

cpe:2.3:a:centreon:centreon_web:2.6.4
Centreon » Centreon Web » Version: 2.6.5

cpe:2.3:a:centreon:centreon_web:2.6.5
Centreon » Centreon Web » Version: 2.6.6

cpe:2.3:a:centreon:centreon_web:2.6.6
Centreon » Centreon Web » Version: 2.7.0

cpe:2.3:a:centreon:centreon_web:2.7.0
Centreon » Centreon Web » Version: 2.7.1

cpe:2.3:a:centreon:centreon_web:2.7.1
Centreon » Centreon Web » Version: 2.7.10

cpe:2.3:a:centreon:centreon_web:2.7.10
Centreon » Centreon Web » Version: 2.7.11

cpe:2.3:a:centreon:centreon_web:2.7.11
Centreon » Centreon Web » Version: 2.7.12

cpe:2.3:a:centreon:centreon_web:2.7.12
Centreon » Centreon Web » Version: 2.7.13

cpe:2.3:a:centreon:centreon_web:2.7.13
Centreon » Centreon Web » Version: 2.7.2

cpe:2.3:a:centreon:centreon_web:2.7.2
Centreon » Centreon Web » Version: 2.7.3

cpe:2.3:a:centreon:centreon_web:2.7.3
Centreon » Centreon Web » Version: 2.7.4

cpe:2.3:a:centreon:centreon_web:2.7.4
Centreon » Centreon Web » Version: 2.7.5

cpe:2.3:a:centreon:centreon_web:2.7.5
Centreon » Centreon Web » Version: 2.7.6

cpe:2.3:a:centreon:centreon_web:2.7.6
Centreon » Centreon Web » Version: 2.7.7

cpe:2.3:a:centreon:centreon_web:2.7.7
Centreon » Centreon Web » Version: 2.7.8

cpe:2.3:a:centreon:centreon_web:2.7.8
Centreon » Centreon Web » Version: 2.7.9

cpe:2.3:a:centreon:centreon_web:2.7.9
Centreon » Centreon Web » Version: 2.8

cpe:2.3:a:centreon:centreon_web:2.8
Centreon » Centreon Web » Version: 2.8.0

cpe:2.3:a:centreon:centreon_web:2.8.0
Centreon » Centreon Web » Version: 2.8.1

cpe:2.3:a:centreon:centreon_web:2.8.1
Centreon » Centreon Web » Version: 2.8.10

cpe:2.3:a:centreon:centreon_web:2.8.10
Centreon » Centreon Web » Version: 2.8.11

cpe:2.3:a:centreon:centreon_web:2.8.11
Centreon » Centreon Web » Version: 2.8.12

cpe:2.3:a:centreon:centreon_web:2.8.12
Centreon » Centreon Web » Version: 2.8.13

cpe:2.3:a:centreon:centreon_web:2.8.13
Centreon » Centreon Web » Version: 2.8.14

cpe:2.3:a:centreon:centreon_web:2.8.14
Centreon » Centreon Web » Version: 2.8.15

cpe:2.3:a:centreon:centreon_web:2.8.15
Centreon » Centreon Web » Version: 2.8.16

cpe:2.3:a:centreon:centreon_web:2.8.16
Centreon » Centreon Web » Version: 2.8.17

cpe:2.3:a:centreon:centreon_web:2.8.17
Centreon » Centreon Web » Version: 2.8.18

cpe:2.3:a:centreon:centreon_web:2.8.18
Centreon » Centreon Web » Version: 2.8.19

cpe:2.3:a:centreon:centreon_web:2.8.19
Centreon » Centreon Web » Version: 2.8.2

cpe:2.3:a:centreon:centreon_web:2.8.2
Centreon » Centreon Web » Version: 2.8.20

cpe:2.3:a:centreon:centreon_web:2.8.20
Centreon » Centreon Web » Version: 2.8.21

cpe:2.3:a:centreon:centreon_web:2.8.21
Centreon » Centreon Web » Version: 2.8.216

cpe:2.3:a:centreon:centreon_web:2.8.216
Centreon » Centreon Web » Version: 2.8.22

cpe:2.3:a:centreon:centreon_web:2.8.22
Centreon » Centreon Web » Version: 2.8.23

cpe:2.3:a:centreon:centreon_web:2.8.23
Centreon » Centreon Web » Version: 2.8.24

cpe:2.3:a:centreon:centreon_web:2.8.24
Centreon » Centreon Web » Version: 2.8.25

cpe:2.3:a:centreon:centreon_web:2.8.25
Centreon » Centreon Web » Version: 2.8.26

cpe:2.3:a:centreon:centreon_web:2.8.26
Centreon » Centreon Web » Version: 2.8.27

cpe:2.3:a:centreon:centreon_web:2.8.27
Centreon » Centreon Web » Version: 2.8.28

cpe:2.3:a:centreon:centreon_web:2.8.28
Centreon » Centreon Web » Version: 2.8.29

cpe:2.3:a:centreon:centreon_web:2.8.29
Centreon » Centreon Web » Version: 2.8.3

cpe:2.3:a:centreon:centreon_web:2.8.3
Centreon » Centreon Web » Version: 2.8.30

cpe:2.3:a:centreon:centreon_web:2.8.30
Centreon » Centreon Web » Version: 2.8.31

cpe:2.3:a:centreon:centreon_web:2.8.31
Centreon » Centreon Web » Version: 2.8.32

cpe:2.3:a:centreon:centreon_web:2.8.32
Centreon » Centreon Web » Version: 2.8.33

cpe:2.3:a:centreon:centreon_web:2.8.33
Centreon » Centreon Web » Version: 2.8.34

cpe:2.3:a:centreon:centreon_web:2.8.34
Centreon » Centreon Web » Version: 2.8.35

cpe:2.3:a:centreon:centreon_web:2.8.35
Centreon » Centreon Web » Version: 2.8.36

cpe:2.3:a:centreon:centreon_web:2.8.36
Centreon » Centreon Web » Version: 2.8.37

cpe:2.3:a:centreon:centreon_web:2.8.37
Centreon » Centreon Web » Version: 2.8.4

cpe:2.3:a:centreon:centreon_web:2.8.4
Centreon » Centreon Web » Version: 2.8.5

cpe:2.3:a:centreon:centreon_web:2.8.5
Centreon » Centreon Web » Version: 2.8.6

cpe:2.3:a:centreon:centreon_web:2.8.6
Centreon » Centreon Web » Version: 2.8.7

cpe:2.3:a:centreon:centreon_web:2.8.7
Centreon » Centreon Web » Version: 2.8.8

cpe:2.3:a:centreon:centreon_web:2.8.8
Centreon » Centreon Web » Version: 2.8.9

cpe:2.3:a:centreon:centreon_web:2.8.9
Centreon » Centreon Web » Version: 2.99.1

cpe:2.3:a:centreon:centreon_web:2.99.1
Centreon » Centreon Web » Version: 2.99.2

cpe:2.3:a:centreon:centreon_web:2.99.2
Centreon » Centreon Web » Version: 2.99.3

cpe:2.3:a:centreon:centreon_web:2.99.3
Centreon » Centreon Web » Version: 2.99.4

cpe:2.3:a:centreon:centreon_web:2.99.4
Centreon » Centreon Web » Version: 2.99.5

cpe:2.3:a:centreon:centreon_web:2.99.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-15299

Products

Pricing

Contact Us