CVE-2019-17644: 
Centreon vulnerability analysis and mitigation

An issue was discovered in Centreon before versions 2.8-30, 18.10-8, 19.04-5, and 19.10-2. The vulnerability allows unauthorized access to sensitive information via an unauthenticated direct request for include/configuration/configObject/host/refreshMacroAjax.php (Security Tracker).

The vulnerability is an information disclosure issue that exists in the host configuration component of Centreon. It specifically affects the refreshMacroAjax.php file within the host configuration module. The issue stems from insufficient access controls that allow unauthenticated users to directly access sensitive configuration data (Security Tracker).

The vulnerability allows unauthorized users to access sensitive configuration information from the Centreon system. This information disclosure could potentially be used by attackers to gather intelligence about the monitored infrastructure and system configuration (Security Tracker).

The vulnerability has been fixed in Centreon versions 2.8-30, 18.10-8, 19.04-5, and 19.10-2. Users should upgrade to these versions or later to mitigate the vulnerability (Security Tracker).