CVE-2025-4646
A high privilege user is able to create and use a valid admin API token in centreon-web
Summary
A high privilege user is able to create and use a valid admin API token in centreon-web
Original description
The description as published by the source.
Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory thewatch.centreon.com