CVE-2025-4646
A high privilege user is able to create and use a valid admin API token in centreon-web
Résumé
A high privilege user is able to create and use a valid admin API token in centreon-web
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory thewatch.centreon.com