Skip to content
OpenAdvisories
Unscored CVE-2019-15299 EUVD-2019-6306GHSA-927r-wpc8-9m3x

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key fi…

Published Feb 24, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.

References