What is GHSA-f4hh-xxqh-wgpq?

GHSA-f4hh-xxqh-wgpq is a security advisory published by GitHub Security Advisories with Medium severity. Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS

Which CVE IDs does GHSA-f4hh-xxqh-wgpq cover?

GHSA-f4hh-xxqh-wgpq covers the following CVE IDs: CVE-2019-10667. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f4hh-xxqh-wgpq?

GHSA-f4hh-xxqh-wgpq has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-f4hh-xxqh-wgpq?

GHSA-f4hh-xxqh-wgpq affects 1 product, including: composer/librenms/librenms:\u003c 1.50.1.

GHSA-f4hh-xxqh-wgpqMediumCVSS 5.3

Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS

Vendor

GitHub Security Advisories

Published

October 11, 2019

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-10667 →

📋 Description

An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.

🎯 Affected products1

composer/librenms/librenms:< 1.50.1

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2019-10667
https://www.darkmatter.ae/xen1thlabs/librenms-information-disclosure-vulnerability-xl-19-018/
https://github.com/advisories/GHSA-f4hh-xxqh-wgpq