Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation.
ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26.
References
| Link | Resource |
|---|---|
| https://github.com/centreon/centreon/releases | Release Notes |
| https://thewatch.centreon.com/latest-security-bulletins-64/centreon-web-medium-severity-4349 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Oct 2025, 14:05
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Centreon
Centreon centreon Web |
|
| References | () https://github.com/centreon/centreon/releases - Release Notes | |
| References | () https://thewatch.centreon.com/latest-security-bulletins-64/centreon-web-medium-severity-4349 - Vendor Advisory | |
| CPE | cpe:2.3:a:centreon:centreon_web:24.10.3:*:*:*:*:*:*:* cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:* cpe:2.3:a:centreon:centreon_web:24.04.9:*:*:*:*:*:*:* |
15 Oct 2025, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-755 | |
| Summary | (en) Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26. |
13 May 2025, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 12:15
Updated : 2025-10-22 14:05
NVD link : CVE-2025-4649
Mitre link : CVE-2025-4649
CVE.ORG link : CVE-2025-4649
JSON object : View
Products Affected
centreon
- centreon_web
CWE
CWE-755
Improper Handling of Exceptional Conditions