CVE-2019-10668 - An issue was discovered in LibreNMS through 1.47

Back Back to CVE browser

MEDIUM

An issue was discovered in LibreNMS through 1.47

Published Sep 9, 2019

9.1

MEDIUM

CVSS 3.1

EPSS 1.60%

Description

An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly accessible.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

https://github.com/advisories/GHSA-277v-gwfr-hmpj
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10668
https://www.darkmatter.ae/xen1thlabs/librenms-authentication-bypass-vulnerability-xl-19-016/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-277v-gwfr-hmpj		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10668
https://www.darkmatter.ae/xen1thlabs/librenms-authentication-bypass-vulnerability-xl-19-016/		x_refsource_MISCExploitThird Party Advisory