What’s Vulnerable › Vulnerabilities

CVE-2020-10945

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-27 · updated 2026-06-17
Weakness: CWE-200

Description

Centreon before 19.10.7 exposes Session IDs in server responses.

Affected products

centreon: through 2.8.2; from 18.10.0 before 18.10.11; from 19.04.0 before 19.04.10; from 19.10 before 19.10.7 — fixed in 18.10.11, 19.04.10, 19.10.7
Centreon Widget-Host-Monitoring: before 1.6.4; from 18.10.0 before 18.10.3; from 19.04.0 before 19.04.3; 19.10.0 — fixed in 1.6.4, 18.10.3, 19.04.3

How to fix

Upgrade to a fixed version: centreon 18.10.11, 19.04.10, 19.10.7; Centreon Widget-Host-Monitoring 1.6.4, 18.10.3, 19.04.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-10945 or the next vulnerability affects your stack