Use of Insufficiently Random Values

CVE-2019-17105

Medium

5.3/10

Summary

The token generator in index.php in Centreon Web before 18.10.5 is predictable.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: LOW
Availability Impact: NONE

CWE-330 - Use of Insufficiently Random Values

The software uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References

Advisory Timeline

Published Oct 08, 2019