Authentication Bypass in LibreNMS by LibreNMS
CVE-2019-10668

9.1CRITICAL

Key Information:

Vendor

Librenms

Status
Librenms
Vendor
CVE Published:
9 September 2019

What is CVE-2019-10668?

An issue identified in LibreNMS versions up to 1.47 allows unauthorized access due to certain scripts importing authentication libraries without proper enforcement. This oversight leaves sensitive information exposed, as critical functions may be accessed without authentication. Organizations utilizing LibreNMS should take immediate steps to patch this vulnerability to protect their data integrity and security.

References

https://www.darkmatter.ae/xen1thlabs/librenms-authenticat...
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-10668 : Authentication Bypass in LibreNMS by LibreNMS