Vulnerability Report

CVE-2025-12519

Title: Missing Authorization and Information Disclosure in Centreon Infra Monitoring (Administration parameters API endpoint modules)

Information Disclosure

Proof Of Concept

No public PoC currently indexed for CVE-2025-12519.

CWE Category CWE-862

Published Date Jan 05, 2026

Modified Date Jan 26, 2026

Exploit Status Not Found

Score 5.3 CVSS v3.1

Exploit Probability (EPSS)

0.20%

Vulnerability Summary

CVE-2025-12519: Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly Constrained by ACLs, resulting in Information Disclosure like downtime or acknowledgement configurations. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.

Impacted Vendors

centreon 1

Reference Links

https://github.com/centreon/centreon/releases

CVSS v3.1

Source Entity bd4443e6-1eef-43f3-9886-25fc9ceeaae7

Severity MEDIUM

5.3

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns