CVE-2025-4649

Published: May 13, 2025Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: bd4443e6-1eef-43f3-9886-25fc9ceeaae7 (Secondary)

Description

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26.

Affected (4)

Products: Centreon: Centreon Web

Centreon

1 product

Centreon Web

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Centreon Centreon Web	From 23.04.24 to 23.04.26
Centreon Centreon Web	From 23.10.19 to 23.10.21
Centreon Centreon Web	Version 24.04.9
Centreon Centreon Web	Version 24.10.3

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (2)

https://github.com/centreon/centreon/releases

Source: bd4443e6-1eef-43f3-9886-25fc9ceeaae7

Release Notes

https://thewatch.centreon.com/latest-security-bulletins-64/centreon-web-medium-severity-4349

Source: bd4443e6-1eef-43f3-9886-25fc9ceeaae7

Vendor Advisory

Timeline

No history available yet.