Centreon Web Improper Privilege Management Vulnerability Allowing Privilege Escalation

A privilege escalation vulnerability has been identified in Centreon Web versions 24.04.0 prior to 24.04.10 and 24.10.0 prior to 24.10.4. This issue arises in the API Token creation form, where a user with high privileges can generate an API token for an admin user and copy the token's value.

Impact

Exploitation of this vulnerability allows a user with high privileges to create an API token for an admin user, potentially leading to unauthorized access or actions on behalf of the admin.

Remediation

Users are advised to update to Centreon Web 24.10.4 or 24.04.10, both of which include cumulative fixes from prior updates.