CVE-2025-4646 — A high privilege user is able to create and use a valid admin API token in centreon-web
Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24…
Published: 2025-05-13 · CVSS: 7.2 · CVSS 3.1
Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7