Approved changes feed: RSS · Atom

cpe:2.3:a:centreon:centreon_web:24.10.3:*:*:*:*:*:*:*

part: a version: 24.10.3 update: *

VendorCentreon (e01a1192-018f-55df-98f2-b9707fac306d)
ProductCentreon Web (6ea182ce-c62a-5034-9e78-8680bc7a3c53)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/centreon/centreon purl2cpe 2026-06-01 10:10:56.357165
pkg:rpm/opensuse/centreon-web purl2cpe 2026-06-01 10:10:56.357167

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4649 vulnerable 2026-06-03 15:01:48.475620 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
MEDIUM (4.9)
Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26.
Published: 2025-05-13T11:40:23.198Z
Updated: 2025-10-15T13:05:23.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.