Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly Constrained by ACLs, resulting in Information Disclosure like downtime or acknowledgement configurations. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.
References
| Link | Resource |
|---|---|
| https://github.com/centreon/centreon/releases | Release Notes |
| https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12519-centreon-web-medium-severity-5359 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
26 Jan 2026, 15:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Centreon
Centreon centreon Web |
|
| CPE | cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:* | |
| References | () https://github.com/centreon/centreon/releases - Release Notes | |
| References | () https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12519-centreon-web-medium-severity-5359 - Patch, Vendor Advisory |
08 Jan 2026, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Jan 2026, 11:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-05 11:17
Updated : 2026-01-26 15:08
NVD link : CVE-2025-12519
Mitre link : CVE-2025-12519
CVE.ORG link : CVE-2025-12519
JSON object : View
Products Affected
centreon
- centreon_web
CWE
CWE-862
Missing Authorization