CVE-2025-4646
A high privilege user is able to create and use a valid admin API token in centreon-web
概要
A high privilege user is able to create and use a valid admin API token in centreon-web
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory thewatch.centreon.com