An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| centreon/centreon(Packagist) | 20.10.0 | 20.10.7 | N/A |
| centreon/centreon(Packagist) | 20.04.0 | 20.04.13 | N/A |
| centreon/centreon(Packagist) | 19.10.0 | 19.10.23 | N/A |
| centreon/centreon(Packagist) | 0 | 2.8.37 | N/A |
CVSS Metrics
