CVE-2025-4646
A high privilege user is able to create and use a valid admin API token in centreon-web
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A high privilege user is able to create and use a valid admin API token in centreon-web
Improper Privilege Management vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
Reserved 2025-05-13 | Published 2025-05-13 | Updated 2025-05-13 | Assigner CentreonCWE-269 Improper Privilege Management
Floerer from YesWeHack
thewatch.centreon.com/...572-centreon-web-high-severity-4460
github.com/centreon/centreon/releases
Support options
