CVE-2019-17104

7.5 highEPSS 1.9%

High (7.5) in centreon centreon vm. EPSS 1.9% chance of exploitation in the next 30 days.

In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-565
Published: 2019-10-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

centreon:centreon_vm

References

http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/issues/7097
https://www.openwall.com/lists/oss-security/2019/10/08/1
http://www.openwall.com/lists/oss-security/2019/10/09/2
https://github.com/centreon/centreon/issues/7097

Check your stack JSON