CVE-2025-12523Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure

Descripción

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://thewatch.centreon.comundefined vendor-advisory
• https://github.com/centreon/centreon/releases release-notes