~ / search / GHSA-f4hh-xxqh-wgpq

GHSA-f4hh-xxqh-wgpq

Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10667

Packages

EcosystemPackageAffectedFixed in
Packagist librenms/librenms < 1.50.1 1.50.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.

References

External links from the advisory. They lead to third-party sites.