medium6.5
CVE-2025-12523
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
Impact
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centreon | Centreon | from 25.10.x before centreon-web-24.04.25 from 24.10 before centreon-web-25.10.6 from 24.04 before centreon-web-24.10.21 |