CVE-2025-8432 — CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON

CVE-2025-8432

CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON PUBLISHED

Description (CNA)

Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15.

Affected (CNA)

Vendor / product	Versions
Centreon / Infra Monitoring	affected 24.10.0 before 24.10.6; affected 24.04.0 before 24.04.9; affected 23.10.0 before 23.10.15

CWE

CWE-276

References

https://github.com/centreon/centreon/releases
https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8432-centreon-mbi-high-severity-5180

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.