Centreon Web 25.10.2

Enhancements

• [Authentication] When a user is authenticated using an IdP, the password fields no longer appear when editing a contact.
• [Dashboards] Status Grid widget: added a new filter for the state of resources (unhandled, acknowledged, in downtime, flapping) has been added.
• [Packaging] Increased the php memory limit in the centreon php configuration.
• [Resource Status] For performance and readability reasons, graphs containing more than 20 metrics are no longer displayed.

Bug fixes

• [ACL] Fixed an issue for users cumulating multiple ACLs that caused the ACL with the highest ID to override other ones.
• [API] Fixed an issue where using Rest APIv1 would change the token expiration date.
• [API] Fixed an issue that caused commands to return an SQL error when requesting services in real time using MySQL 8.
• [API] Fixed an issue with filtering on realtime service categories listing API endpoint.
• [APIv2] Fixed a 500 error when expiration_date = NULL in security_token.
• [Anomaly Detection] Fixed an issue on broker configuration generation with proxy parameters.
• [Authentication] Allowed to access Centreon UI through a reverse proxy/load balancer.
• [Configuration] Fixed an issue where host names could be saved with special characters but would then cause “export configuration” to fail.
• [Authentication] Fixed an issue where users could lose their DN during an LDAP connection.
• [Authentication] Fixed an issue with LDAP authentication crashing right after a success message.
• [Authentication tokens] Fixed an issue when clicking “cancel” in the change confirmation modal that caused the token’s status to be displayed as changed.
• [BA monitoring page] Fixed an issue that caused certain areas of the page to remain in light mode while dark mode was selected.
• [CEIP] Added data-testid on enable button for both direction.
• [CLAPI] Fixed an issue where the APPLYTPL command would take a long time to take effect.
• [Core] Fixed an issue with API routes.
• [Configuration] Fixed an error when changing the host template order in the host configuration form.
• [Configuration] Fixed an issue in Agent configuration where engine was not listening if “No TLS” was activated (poller-initiated).
• [Configuration] Fixed an issue in Agent configuration (Poller-initiated connection) that prevented users from searching for the host.
• [Configuration] Fixed an issue where host categories were not displayed in the listing when not linked to Host.
• [Configuration] Fixed an issue with page contents getting mixed-up when navigating between Host Groups and Additional configuration pages.
• [Configuration] Fixed an issue with special characters not displaying properly in the escalation configuration screen
• [Configuration] Fixed an issue on remote servers, where max auto_increment was reached after many exports causing imports to fail.
• [Configuration] Fixed an issue that allowed users to save changes when switching CMA agent modes without filling all required fields.
• [Configuration] Fixed an issue where Host templates cannot be used in Host categories by non-admininistrators.
• [Configuration] Fixed an issue where Host severities were no longer written in resources table.
• [Configuration] Fixed an issue where inherited macros could not be overrided on Host/Host template.
• [Configuration] Fixed an undefined array key from acl users which were spamming php log.
• [Custom Views - Host-Monitoring] Fixed an issue where only the current page was exported instead of all data
• [Dashboards] Fixed an issue preventing dashboards to be filtered.
• [Dashboards] Fixed an issue where host status icons were displayed incorrectly in the group monitoring widget.
• [Dashboards] Resource Table widget - Fixed an issue with the host name positioning.
• [Dashboards] Single Metric widget - Fixed an issue with the real-time retrieval of metric values.
• [Gorgone] Clarified Apache logs when gorgone connection failed in discovery.
• [Hosts] Fixed an error where the ACL Resource Groups field would lose its value and display a number instead of a string when a form error occurs.
• [Licenses] Fixed an error message concerning the creation of a dynamic property in a class when downloading licences.
• [Log] Fixed an issue where “Error impCompanyPortal” would appear on /var/log/centreon/centreon-web.log.
• [Medias] Fixed an issue preventing pagination from being displayed properly.
• [Monitoring] Fixed an issue on Host Group Summary redirecting users to Resource Status.
• [Open Tickets] Forced BBDO 3.0.1 instead of 3.1 on pollers to prevent a blocking issue.
• [Performance Graphs] Fixed an issue when exporting data in CSV that resulted in an empty file..
• [Resource Status] Prevent services related to a deleted host to appear in menu filter.
• [Translation] Added missing French translations.

Security fixes

• [Authentication] Password change attempts (both successful and unsuccessful) are now logged in a dedicated log file.
• [Security] Enhanced security on password DOM storage in login page.
• [Vulnerability] Fixed an issue on Broken Access Control in Administration Parameters Endpoint.
• [Vulnerability] Fixed IDOR vulnerability on Custom Views.
• [Vulnerability] Fixed XSS vulnerability in the ACL Menus Access page.
• [Vulnerability] Fixed XSS vulnerability in the Hosts Configuration page.
• [Vulnerability] Fixed XSS vulnerability in the Recurrent Downtimes page.
• [Vulnerability] Fixed XSS vulnerability on export configuration page.