CVE-2019-10668

描述

An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly accessible.

如何修補 CVE-2019-10668

要修補 CVE-2019-10668,請將受影響套件升級到下列已修補版本。

• —升級至 1.50.1 或更新版本

CVE-2019-10668 正在被利用嗎?

低 — EPSS 為 1.6%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.50.1

CVSS 分數

參考連結(2)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2019-10668
• WEBwww.darkmatter.ae/xen1thlabs/librenms-authentication-bypass-vulnerability-xl-19-016