4.9Mittel
CVE-2025-4649ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
Beschreibung
Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26.
Schwachstellentyp (CWE):
CWE-755
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| centreon | centreon web | 23.04.24 – < 23.04.26 | |
| Centreon | web | 24.10.3 – < 24.10.4, 24.04.09 – < 24.04.10, 23.10.19 – < 23.10.21, 23.04.24 – < 23.04.26 |
Referenzen und Patches
- https://thewatch.centreon.com/latest-security-bulletins-64/centreon-web-medium-severity-4349 vendor-advisoryVendor Advisory
- https://github.com/centreon/centreon/releases release-notesRelease Notes
CPE-Treffer (NVD) (4)
cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*≥ 23.04.24 < 23.04.26cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*≥ 23.10.19 < 23.10.21cpe:2.3:a:centreon:centreon_web:24.04.9:*:*:*:*:*:*:*cpe:2.3:a:centreon:centreon_web:24.10.3:*:*:*:*:*:*:*