An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/host/refreshMacroAjax.php.Referenceshttps://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10/index.html