Exposure of Resource to Wrong Sphere in LibreNMS

2021-09-0817:27:16

Google

osv.dev

0.005 Low

EPSS

Percentile

76.1%

JSON

An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of “‘guard’ => ‘admin’” instead of “‘middleware’ => [‘can:admin’]” in routes/web.php.

CPENameOperatorVersion
librenms/librenmseq1.48.1
librenms/librenmseq1.43
librenms/librenmseq1.26
librenms/librenmseq1.51
librenms/librenmseq1.57
librenms/librenmseq1.28
librenms/librenmseq1.64
librenms/librenmseq1.44
librenms/librenmseq1.63
librenms/librenmseq1.21

Name	Operator	Version
librenms/librenms	eq	1.48.1
librenms/librenms	eq	1.43
librenms/librenms	eq	1.26
librenms/librenms	eq	1.51
librenms/librenms	eq	1.57
librenms/librenms	eq	1.28
librenms/librenms	eq	1.64
librenms/librenms	eq	1.44
librenms/librenms	eq	1.63
librenms/librenms	eq	1.21