NetSight
medium6.5

CVE-2025-12523

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

Impact

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

Affected products

VendorProductAffected versions
CentreonCentreon
from 25.10.x before centreon-web-24.04.25
from 24.10 before centreon-web-25.10.6
from 24.04 before centreon-web-24.10.21

Weakness classification

References