GitHub Advisoryadvisory · Packagist

GHSA-f4hh-xxqh-wgpq Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS

MEDIUM Published 2019-10-11 Modified 2021-08-18 Official page ↗
Aliases
CVE-2019-10667
Ecosystem
Packagist
Packages
librenms/librenms
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2019-09-25

Affected packages

• Packagist librenms/librenms: < 1.50.1 → fixed in 1.50.1

Description

An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.

Related

Alias · CVE (1)

  • CVE-2019-10667 An issue was discovered in LibreNMS through 1.47. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References