PT-2025-43928 · Centreon · Centreon Infra Monitoring

Stago · Published 2025-10-27 · Updated 2025-10-30 · CVE-2025-8432

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring versions 23.10.0 through 23.10.15 Centreon Infra Monitoring versions 24.04.0 through 24.04.9 Centreon Infra Monitoring versions 24.10.0 through 24.10.6

Description A flaw exists in Centreon Infra Monitoring (MBI modules) that permits embedding scripts within scripts through the CentreonBI user account on the MBI server. This is due to incorrect default permissions.

Recommendations Update Centreon Infra Monitoring to version 23.10.15 or later. Update Centreon Infra Monitoring to version 24.04.9 or later. Update Centreon Infra Monitoring to version 24.10.6 or later.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-8432

Affected Products

Centreon Infra Monitoring

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8432.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8432 · Security Note
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8432-centreon-mbi-high-severity-5180 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8432 · Vendor Advisory
• https://github.com/centreon/centreon/releases · Note
• https://t.me/cveNotify/140949 · Telegram Post
• https://twitter.com/CVEnew/status/1982760689010688348 · Twitter Post
• https://twitter.com/CveTodo/status/1983069503639503200 · Twitter Post