Marcelo Quieroz

**Name of the Vulnerable Software and Affected Versions** Centreon Infra Monitoring versions 24.04.0 through 24.04.19 Centreon Infra Monitoring versions 24.10.0 through 24.10.15 Centreon Infra Monitoring versions 25.10.0 through 25.10.2 **Description** A missing authorization flaw exists in Centreon Infra Monitoring, specifically within the Administration parameters API endpoint modules. This issue allows access to functionality that is not properly restricted by Access Control Lists (ACLs), leading to information disclosure. The disclosed information includes downtime and acknowledgement configurations. The vulnerable component is the Administration parameters API endpoint. **Recommendations** Update Centreon Infra Monitoring versions prior to 25.10.2. Update Centreon Infra Monitoring versions prior to 24.10.15. Update Centreon Infra Monitoring versions prior to 24.04.19.