CVE-2025-4649CWE-755

ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

Medium · published May 13, 2025

CVSS v3.1
4.9
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation.

ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.6th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2025-05-13T11:40Z
EPSS history
Timeline
  • 13 MAY 11:40Z
    ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
    cvelistv5