Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-12523

Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Centreon

Description

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Centreon Centreon

Default version status: unaffected

  • 24.10 to < centreon-web-25.10.6affected
  • 24.04 to < centreon-web-24.10.21affected
  • 25.10.x to < centreon-web-24.04.25affected

References