VULNERABILITY INTELLIGENCE

CVE-2025-4646

CVSS score7.2 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.

Weakness classification

  • bd4443e6-1eef-43f3-9886-25fc9ceeaae7: CWE-863

Primary references