[Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Centreon

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6bf73fa0 by Moritz Muehlenhoff at 2025-05-13T23:38:30+02:00
auto-nfu: Add rule for Centreon

There's a very old ITP bug for centreon-web, but it has been explicitly
closed with a note that this is no longer pursued.

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,13 +3,13 @@ CVE-2025-4660 (A remote code execution vulnerability exists in the Windows agent
 CVE-2025-4658 (Versions of OpenPubkey library prior to 0.10.0  contained a vulnerabil ...)
 	TODO: check
 CVE-2025-4649 (Improper Privilege Management vulnerability in Centreon web allows Pri ...)
-	TODO: check
+	NOT-FOR-US: Centreon
 CVE-2025-4648 (Download of Code Without Integrity Check vulnerability in Centreon web ...)
-	TODO: check
+	NOT-FOR-US: Centreon
 CVE-2025-4647 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
-	TODO: check
+	NOT-FOR-US: Centreon
 CVE-2025-4646 (Improper Privilege Management vulnerability in Centreon web (API Token ...)
-	TODO: check
+	NOT-FOR-US: Centreon
 CVE-2025-4428 (Remote Code Execution in API component in Ivanti Endpoint Manager Mobi ...)
 	NOT-FOR-US: Ivanti
 CVE-2025-4427 (An authentication bypass in the API component of Ivanti Endpoint Manag ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -37,6 +37,8 @@
   cna: brocade
 - reason: Canon
   cna: Canon
+- reason: Centreon
+  cna: Centreon
 - reason: Crestron
   cna: Crestron
 - reason: Dell / EMC



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6bf73fa02a8da5b4c6707104dbfc1fed531beaaa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6bf73fa02a8da5b4c6707104dbfc1fed531beaaa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250513/a5d7d5c0/attachment-0001.htm>