CVE-2025-58156 is a vulnerability classified under CWE-285 (Improper Authorization) affecting the Centurion ERP software developed by nofusscomputing. Centurion ERP is an enterprise resource planning system with a focus on IT service management (ITSM) and automation. The vulnerability exists in versions from 1.12.0 up to but not including 1.21.0. It allows an authenticated user with low privileges to view all authentication token details stored within the database. Although the tokens are stored as hashed values and no unhashed tokens are exposed, the ability to access all token hashes represents an improper authorization flaw. This could potentially aid an attacker in offline attacks such as brute forcing or token replay if additional weaknesses exist. The vulnerability does not impact confidentiality beyond token hashes, nor does it affect integrity or availability directly. The issue has been addressed in version 1.21.0. There is no viable workaround other than disabling token authentication, which is impractical. Users are advised to upgrade to the patched version and remove all authentication tokens created by affected versions to mitigate risk. No known exploits are currently reported in the wild, and the CVSS v3.1 base score is 1.9, indicating low severity. The attack vector requires local access (AV:P), low complexity (AC:L), low privileges (PR:L), and user interaction (UI:R).

For European organizations using Centurion ERP versions between 1.12.0 and 1.20.x, this vulnerability could lead to unauthorized disclosure of hashed authentication tokens to any authenticated user. While the tokens are hashed and not directly usable, exposure increases the risk of offline attacks to compromise token integrity, potentially enabling unauthorized access if token hashes are weak or reused. This could undermine the confidentiality of authentication mechanisms within the ERP system, potentially leading to privilege escalation or lateral movement within the network. However, since the vulnerability requires authenticated access and user interaction, and does not expose unhashed tokens or directly affect system integrity or availability, the overall impact is limited. Nonetheless, organizations handling sensitive ITSM and automation workflows should consider this a risk to their internal security posture, especially if tokens are reused or weakly hashed. The lack of known exploits reduces immediate risk but does not eliminate the need for remediation.

1. Upgrade Centurion ERP to version 1.21.0 or later immediately to apply the official patch addressing this vulnerability. 2. After upgrading, remove all existing authentication tokens from the database to invalidate potentially compromised tokens. 3. Enforce strong token hashing algorithms and consider implementing multi-factor authentication to reduce reliance on tokens alone. 4. Restrict authenticated user permissions to the minimum necessary to reduce the risk of token exposure. 5. Monitor authentication logs for unusual access patterns or token usage that could indicate exploitation attempts. 6. Conduct regular security audits and penetration tests focusing on authentication and authorization controls within the ERP environment. 7. Educate users about the importance of not sharing credentials and recognizing phishing attempts that could lead to unauthorized authentication.