CVE-2025-8432

published 2025-10-27

CVE-2025-8432: Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on…

Priority P3 46 high 8.4 CVSS 3.1

AV N AC L PR H UI R S C C H I H A H

Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
centreon	infra_monitoring	>= 23.10.0 < 23.10.15	23.10.15
centreon	infra_monitoring	>= 24.04.0 < 24.04.9	24.04.9
centreon	infra_monitoring	>= 24.10.0 < 24.10.6	24.10.6

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276