LibreNMS up to 1.65.0 Access Control routes/web.php exposure of resource

Summaryinfo

A vulnerability classified as critical was found in LibreNMS up to 1.65.0. The impacted element is an unknown function of the file routes/web.php of the component Access Control. Such manipulation leads to exposure of resource. This vulnerability is listed as CVE-2020-15877. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in LibreNMS up to 1.65.0. It has been rated as critical. Affected by this issue is an unknown function of the file routes/web.php of the component Access Control. The manipulation with an unknown input leads to a exposure of resource vulnerability. Using CWE to declare the problem leads to CWE-668. The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. Impacted is confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php.

The weakness was presented 07/21/2020. This vulnerability is handled as CVE-2020-15877 since 07/21/2020. The exploitation is known to be easy. The attack may be launched remotely. The successful exploitation requires a simple authentication. Technical details are known, but there is no available exploit.

By approaching the search of inurl:routes/web.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.65.1 eliminates this vulnerability.

See VDB-158857 for similar entry. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• LibreNMS

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.40
• 1.41
• 1.42
• 1.43
• 1.44
• 1.45
• 1.46
• 1.47
• 1.48
• 1.49
• 1.50
• 1.51
• 1.52
• 1.53
• 1.54
• 1.55
• 1.56
• 1.57
• 1.58
• 1.59
• 1.60
• 1.61
• 1.62
• 1.63
• 1.64
• 1.65.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion