CVE-2019-17108 : Security Advisory and Response

Centreon Web version 2.8.28 and earlier is vulnerable to attacks that can lead to information disclosure and stored XSS attacks.

Understanding CVE-2019-17108

This CVE involves a vulnerability in the brokerPerformance.php file within Centreon Web.

What is CVE-2019-17108?

Attackers can exploit this vulnerability to reveal sensitive information or conduct a stored XSS attack on a user.

The Impact of CVE-2019-17108

The vulnerability allows attackers to potentially access sensitive data or execute malicious scripts on affected systems.

Technical Details of CVE-2019-17108

This section provides more technical insights into the CVE.

Vulnerability Description

The vulnerability exists in the brokerPerformance.php file in Centreon Web versions prior to 2.8.28, enabling attackers to carry out stored XSS attacks or disclose sensitive information.

Affected Systems and Versions

Centreon Web version 2.8.28 and earlier

Exploitation Mechanism

Attackers exploit the vulnerability in the brokerPerformance.php file to execute stored XSS attacks or reveal sensitive data.

Mitigation and Prevention

Protecting systems from CVE-2019-17108 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update Centreon Web to version 2.8.28 or the latest release
Monitor and restrict user input to prevent XSS attacks

Long-Term Security Practices

Regularly update and patch software to address vulnerabilities
Implement security measures to mitigate XSS risks
Conduct security audits and assessments periodically
Educate users on safe browsing practices

Patching and Updates

Ensure timely patching and updates for Centreon Web to address the vulnerability and enhance system security.