CVEvulnerability

CVE-2025-4649

4.9 MEDIUM Published 2025-05-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-05-13
Last modified
2026-06-17
Assigner
bd4443e6-1eef-43f3-9886-25fc9ceeaae7
CVSS 3.1 (bd4443e6-1eef-43f3-9886-25fc9ceeaae7)
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-755

Description

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26.

Affected configurations

• centreon centreon web (>= 23.04.24 < 23.04.26) • centreon centreon web (>= 23.10.19 < 23.10.21) • centreon centreon web 24.04.9 • centreon centreon web 24.10.3

Related

Weakness · CWE (1)

  • CWE-755 Improper Handling of Exceptional Conditions weakness

References