PT-2026-1256 · Centreon · Centreon Infra Monitoring

Marcelo Quieroz · Publicado 2026-01-05 · Atualizado 2026-01-26 · CVE-2025-12519

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring versions 24.04.0 through 24.04.19 Centreon Infra Monitoring versions 24.10.0 through 24.10.15 Centreon Infra Monitoring versions 25.10.0 through 25.10.2

Description A missing authorization flaw exists in Centreon Infra Monitoring, specifically within the Administration parameters API endpoint modules. This issue allows access to functionality that is not properly restricted by Access Control Lists (ACLs), leading to information disclosure. The disclosed information includes downtime and acknowledgement configurations. The vulnerable component is the Administration parameters API endpoint.

Recommendations Update Centreon Infra Monitoring versions prior to 25.10.2. Update Centreon Infra Monitoring versions prior to 24.10.15. Update Centreon Infra Monitoring versions prior to 24.04.19.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2025-12519

Produtos afetados

Centreon Infra Monitoring

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12519.json · Exploit
• https://github.com/centreon/centreon/releases · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-12519 · Nota de Segurança
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12519-centreon-web-medium-severity-5359 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-12519 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2008129297823756370 · Publicação no Twitter
• https://t.me/cveNotify/149875 · Publicação no Telegram
• https://t.me/CVEtracker/41362 · Publicação no Telegram