← CVE Intelligence

CVE-2025-15026

Unauthenticated configuration import allows administrative account creation using AWIE component PUBLISHED

Description (CNA)

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Affected (CNA)

Vendor / productVersions
Centreon / Infra Monitoringaffected 25.10.0 before 25.10.2; affected 24.10.0 before 24.10.3; affected 24.04.0 before 24.04.3

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.