Information Exposure Affecting librenms/librenms package, versions <1.50.1
Threat Intelligence
EPSS
0.13% (48th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-LIBRENMSLIBRENMS-536059
- published 26 Nov 2019
- disclosed 9 Sep 2019
- credit Unknown
Introduced: 9 Sep 2019
CVE-2019-10667 Open this link in a new tabHow to fix?
Upgrade librenms/librenms to version 1.50.1 or higher.
Overview
librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support.
Affected versions of this package are vulnerable to Information Exposure. An attacker can fingerprint the exact code version installed and disclose local file paths.
References
CVSS Scores
version 3.1