CVE-2019-17104
Centreon Does Not Set HTTPOnly Flag
Summary
Centreon Does Not Set HTTPOnly Flag
Original description
The description as published by the source.
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
centreon/centreon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"19.04.3"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web docs.centreon.com
- web openwall.com