CVE-2025-15026
CriticalSummary
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.
Risk Assessment
An attacker can access administrative functions without authentication, potentially leading to unauthorized changes in the system.
Recommendation
It is recommended to update to version 25.10.2, 24.10.3, or 24.04.3 (or later) depending on the used line.
Original NVD description (English source)
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.