phpIPAM < 1.5.0 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

Security fix for the ALT Linux 9 package phpipam version 1.45.031-alt1

1.45.031-alt1 built Feb. 1, 2022 Alexey Shabalin in task 294095 Jan. 25, 2022 Alexey Shabalin - 1.4.5 Release Fixes: CVE-2020-7988...

CVE-2020-7988

The vulnerability CVE-2020-7988 affects phpIPAM 1.4, where tools/pass-change/result.php is exploitable via CSRF to change passwords for any user/admin due to no requirement to supply the old password and absence of security tokens. This can lead to privilege escalation and access to additional da...