CVE-2025-15026: Broken Access Control
CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-15026
Summary
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs.
Impact
Broken Access Control vulnerabilities can have severe consequences, including:
- Unauthorized access to restricted functionality;
- Escalation of privileges for low-level users;
- Exposure of sensitive data and potential system compromise;
- Loss of confidentiality and integrity of educational records;
- Reputational damage to the organization.
Reference
Finder
By: CVE-Hunters