medium5.3
CVE-2019-10667
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
Impact
An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | librenms/librenms | < 1.50.1 | 1.50.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Librenms | Librenms | through 1.47 |