Authentication Bypass

LibreNMS is vulnerable to Authentication Bypass. The vulnerability is due to improper rate limiting checks on login mechanisms using the GET method in the /?username=admin&password;=password&submit;= endpoint. This can be exploited by an attacker to perform a brute force attack at the login endpoint, resulting in authentication bypass.