CVE-2019-17104
Centreon Does Not Set HTTPOnly Flag
Résumé
Centreon Does Not Set HTTPOnly Flag
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
centreon/centreon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"19.04.3"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web docs.centreon.com
- web openwall.com