CVE-2019-17104: Centreon Vm

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.

Affected products

• Centreon Centreon Vm: up to and including 19.04.3

Published 2019-10-08. Last modified 2026-06-17.