Authorization Bypass in Centreon Configuration Affects User Data
CVE-2025-12523

6.5MEDIUM

Key Information:

Vendor

Centreon

Status
Centreon
Vendor
CVE Published:
29 October 2026

What is CVE-2025-12523?

A flaw exists in the Users Configuration Endpoint of Centreon that allows authenticated users to bypass object-level authorization controls. This vulnerability can lead to unauthorized information disclosure, potentially exposing sensitive user data to malicious individuals with access to the system.

Affected Version(s)

Centreon 24.10

Centreon 24.04

Centreon 25.10.x

References

https://thewatch.centreon.comundefined
vendor-advisory
https://github.com/centreon/centreon/releases
release-notes

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HĂ©ctor MORALES
.