PT-2025-35323 · Unknown · Centurion Erp

Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-58156

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Centurion ERP versions 1.12.0 through 1.20.999

Description Centurion ERP is an ERP system focused on ITSM and automation. An authenticated user can view authentication token details, including the hashed token, within the database.

Recommendations Remove any authentication token created by versions prior to 1.21.0. Webmasters should remove all authentication tokens from the database.

Exploit

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2025-58156

GHSA-X75J-CM35-5QCG

Affected Products

Centurion Erp

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58156.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-58156 · Vendor Advisory
• https://github.com/nofusscomputing/centurion_erp/commit/332eb1075ad828e5c4c24caeaf5605259eb7ce34 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-58156 · Security Note
• https://github.com/nofusscomputing/centurion_erp/security/advisories/GHSA-x75j-cm35-5qcg · Vendor Advisory
• https://t.me/CVEtracker/31295 · Telegram Post
• https://twitter.com/CVEnew/status/1961547028875637034 · Twitter Post
• https://github.com/nofusscomputing/centurion_erp/pull/974 · Note