CVE-2025-12519CWE-862

Information disclosure on Administration parameters API endpoint

Medium · published January 5, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly Constrained by ACLs, resulting in Information Disclosure like downtime or acknowledgement configurations. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-01-05T10:15Z
EPSS history
Timeline
  • 05 JAN 10:15Z
    Information disclosure on Administration parameters API endpoint
    cvelistv5