Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-15026

Unauthenticated configuration import allows administrative account creation using AWIE component

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Centreon

Description

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Centreon Infra Monitoring

Default version status: unaffected

  • 25.10.0 to < 25.10.2affected
  • 24.10.0 to < 24.10.3affected
  • 24.04.0 to < 24.04.3affected

References