CVE-2025-5965

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-5965", "assignerOrgId": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "state": "PUBLISHED", "assignerShortName": "Centreon", "dateReserved": "2025-06-10T08:14:47.529Z", "datePublished": "2026-01-05T10:06:05.494Z", "dateUpdated": "2026-01-08T15:43:03.373Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Backup configuration in the administration setup"], "product": "Infra Monitoring", "vendor": "Centreon", "versions": [{"lessThan": "25.10.2", "status": "affected", "version": "25.10.0", "versionType": "semver"}, {"lessThan": "24.10.15", "status": "affected", "version": "24.10.0", "versionType": "semver"}, {"lessThan": "24.04.19", "status": "affected", "version": "24.04.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "h00die-gr3y"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.<p>This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.</p>"}], "value": "In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "shortName": "Centreon", "dateUpdated": "2026-01-08T15:43:03.373Z"}, "references": [{"tags": ["release-notes"], "url": "https://github.com/centreon/centreon/releases"}, {"tags": ["vendor-advisory"], "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362"}], "source": {"discovery": "UNKNOWN"}, "title": "RCE via the backup feature available only to user with high privilege", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-05T20:01:00.415596Z", "id": "CVE-2025-5965", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-05T20:01:20.692Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-5965", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-05T20:01:00.415596Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-05T20:01:17.220Z"}}], "cna": {"title": "RCE via the backup feature available only to user with high privilege", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "h00die-gr3y"}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Centreon", "modules": ["Backup configuration in the administration setup"], "product": "Infra Monitoring", "versions": [{"status": "affected", "version": "25.10.0", "lessThan": "25.10.2", "versionType": "semver"}, {"status": "affected", "version": "24.10.0", "lessThan": "24.10.15", "versionType": "semver"}, {"status": "affected", "version": "24.04.0", "lessThan": "24.04.19", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/centreon/centreon/releases", "tags": ["release-notes"]}, {"url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.", "supportingMedia": [{"type": "text/html", "value": "In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.<p>This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "shortName": "Centreon", "dateUpdated": "2026-01-08T15:43:03.373Z"}}}, "cveMetadata": {"cveId": "CVE-2025-5965", "state": "PUBLISHED", "dateUpdated": "2026-01-08T15:43:03.373Z", "dateReserved": "2025-06-10T08:14:47.529Z", "assignerOrgId": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "datePublished": "2026-01-05T10:06:05.494Z", "assignerShortName": "Centreon"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["Backup configuration in the administration setup"], "product": "Infra Monitoring", "vendor": "Centreon", "versions": [{"lessThan": "25.10.2", "status": "affected", "version": "25.10.0", "versionType": "semver"}, {"lessThan": "24.10.15", "status": "affected", "version": "24.10.0", "versionType": "semver"}, {"lessThan": "24.04.19", "status": "affected", "version": "24.04.0", "versionType": "semver"}]}], "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", "matchCriteriaId": "440A575D-6C68-4894-A4DB-C62065FE0349", "versionEndExcluding": "24.04.19", "versionStartIncluding": "24.04.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE9F2C39-E778-4EFE-8E0B-14D5174A717D", "versionEndExcluding": "24.10.15", "versionStartIncluding": "24.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", "matchCriteriaId": "1842C772-1AC5-49B3-A209-2B8AD6C31134", "versionEndExcluding": "25.10.2", "versionStartIncluding": "25.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19."}, {"lang": "es", "value": "En los par\u00e1metros de copia de seguridad, un usuario con altos privilegios puede concatenar instrucciones personalizadas a la configuraci\u00f3n de la copia de seguridad. Una vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyecci\u00f3n de comandos del sistema operativo') en Centreon Infra Monitoring (configuraci\u00f3n de copia de seguridad en los m\u00f3dulos de configuraci\u00f3n de administraci\u00f3n) permite la inyecci\u00f3n de comandos del sistema operativo. Este problema afecta a Infra Monitoring: de 25.10.0 anterior a 25.10.2, de 24.10.0 anterior a 24.10.15, de 24.04.0 anterior a 24.04.19."}], "id": "CVE-2025-5965", "lastModified": "2026-10-07T11:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-5965", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-05T20:01:00.415596Z", "version": "2.0.3"}}]}, "published": "2026-01-05T10:15:55.870", "references": [{"source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "tags": ["Release Notes"], "url": "https://github.com/centreon/centreon/releases"}, {"source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "tags": ["Patch", "Vendor Advisory"], "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362"}], "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "type": "Secondary"}]}

{}

{"created": "2026-01-06T14:17:37.932649+00:00", "updated": "2026-01-06T14:17:37.932677+00:00", "vendors": ["centreon", "centreon$PRODUCT$centreon"]}