Missing Authorization Vulnerability in Centreon Infra Monitoring by Centreon
CVE-2025-12519

5.3MEDIUM

Key Information:

Vendor

Centreon

Status
Infra Monitoring
Vendor
CVE Published:
5 January 2026

What is CVE-2025-12519?

A missing authorization vulnerability in Centreon Infra Monitoring allows unauthorized access to functionalities that are not sufficiently secured by access control lists (ACLs). This flaw can lead to information disclosure, potentially exposing sensitive data regarding system downtimes and acknowledgment configurations. The versions affected include Infra Monitoring 25.10.0 prior to 25.10.2, 24.10.0 prior to 24.10.15, and 24.04.0 prior to 24.04.19.

Affected Version(s)

Infra Monitoring 25.10.0 < 25.10.2

Infra Monitoring 24.10.0 < 24.10.15

Infra Monitoring 24.04.0 < 24.04.19

References

https://github.com/centreon/centreon/releases
release-notes
https://thewatch.centreon.com/latest-security-bulletins-6...
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcelo Quieroz
.