Lucene search

K
huntrFaisalfs10xCAAB3310-0D70-4C8A-8768-956F8DD3326D
HistoryFeb 13, 2022 - 12:50 a.m.

Exposure of Sensitive Information to an Unauthorized Actor in librenms/librenms

2022-02-1300:50:39
faisalfs10x
www.huntr.dev
6

EPSS

0.001

Percentile

47.6%

LibreNMS v22.1.0 allows users with the normal role/level to view/access the alert transport details. The alert transport may expose sensitive information to an actor that is not explicitly authorized to have access to that information which are supposedly accessible by the Administrator only.

Proof of Concept

Affected endpoints:

1 GET http://{HOST}/alert-transports

~

Steps to reproduce:

1 Login as normal user.

2 Browse to http://{HOST}/alert-transports

3 We can view/access the alert transport information in details such as Transport Name, host IP, Transport Type, Personal Access Token, API Token etc.

~

PoC image:

Impact

This vulnerability is capable of leading to unauthorized sensitive information disclosure of relevant parties.

EPSS

0.001

Percentile

47.6%

Related for CAAB3310-0D70-4C8A-8768-956F8DD3326D