CVE-2023-46745

CVSS V2 None CVSS V3 None

Description

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions the login method has no rate limit. An attacker may be able to leverage this vulnerability to gain access to user accounts. This issue has been addressed in version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Overview

CVE ID
CVE-2023-46745

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2023-11-17T21:42:43.134Z

Last Modified Date
2023-11-17T21:42:43.134Z

Weakness Enumerations

CWE	URL
CWE-307	http://cwe.mitre.org/data/definitions/307.html

References

Reference URL	Reference Tags
https://github.com/librenms/librenms/security/advisories/GHSA-rq42-58qf-v3qx	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-46745
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46745

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 22:46:06				Added to TrackCVE