Security Advisory

CVE-2019-15299

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-24 12:55:57

Last updated 2024-08-05 00:42:03

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.

← Browse all CVEs View on cve.org ↗