GHSA-3c33-3465-fhx2HighCVSS 8.8

Exposure of Resource to Wrong Sphere in LibreNMS

Published
September 8, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-15877 →

📋 Description

An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php.

🎯 Affected products1

  • composer/librenms/librenms:< 1.65.1

🔗 References (8)