GHSA-277v-gwfr-hmpj
Missing Authentication for Critical Function in LibreNMS
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | librenms/librenms | < 1.50.1 | 1.50.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly accessible.
References
External links from the advisory. They lead to third-party sites.