CVE-2019-10668: Missing Authentication for Critical Function

October 11, 2019 (updated May 11, 2021)

An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly accessible.

References

github.com/advisories/GHSA-277v-gwfr-hmpj
nvd.nist.gov/vuln/detail/CVE-2019-10668
www.darkmatter.ae/xen1thlabs/librenms-authentication-bypass-vulnerability-xl-19-016/

Code Behaviors & Features

Detect and mitigate CVE-2019-10668 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →