Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-12523 EUVD-2025-211213GHSA-v74m-5mxp-fcrr

Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure

Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Centreon

Vendor: Centreon Product: Centreon

Description

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

Affected products

VendorProductAffectedFixed
Centreon Centreon 24.10 – < centreon-web-25.10.6, 24.04 – < centreon-web-24.10.21, 25.10.x – < centreon-web-24.04.25 centreon-web-25.10.6

References