CVE-2023-46745: LibreNMS vulnerable to rate limiting bypass on login page
Summary
CVE-2023-46745: LibreNMS vulnerable to rate limiting bypass on login page. Affects librenms/librenms versions < 23.11.0. Fixed in 23.11.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring and management system. It provides a comprehensive set of features for monitoring network devices, collecting performance data, and generating alerts. The application supports multiple login methods, one of which uses a GET request for authentication. This vulnerability arises from the lack of rate limiting security on the GET request or the failure of the backend to validate it.
Vulnerability Detail
The vulnerability allows an attacker to bypass rate limiting and perform brute force attacks on user accounts. By exploiting the GET request for authentication, an attacker can repeatedly attempt to log in with different passwords without being restricted by rate limits. This poses a significant risk as certain web servers may log all requests, potentially exposing victim user credentials. The vulnerability has a CVSS score of 5.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
23.11.0
This is the first release that contains the fix.
composer require librenms/librenms:23.11.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, administrators can disable the vulnerable login method that uses the GET request. This can be done by modifying the application configuration to only allow authentication through the more secure method, such as POST requests. However, this workaround should be considered temporary, and implementing proper rate limiting and switching to a secure authentication method is strongly recommended.
Conclusion
The vulnerability in LibreNMS allows for rate limiting bypass on the login page, enabling attackers to perform brute force attacks on user accounts. To mitigate this vulnerability, it is crucial to implement rate limiting on the login page and switch to a more secure authentication method. Administrators should take immediate action to address this issue and ensure the security of their LibreNMS installations. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for librenms/librenms →
FAQ
LibreNMS is an open-source network monitoring and management system.
The vulnerability allows attackers to perform brute force attacks on user accounts, potentially compromising sensitive information.
To fix this vulnerability, implement rate limiting on the login page and switch to a more secure authentication method.
Yes, administrators can disable the vulnerable login method that uses the GET request as a temporary workaround.
The CVSS score of this vulnerability is 5.3, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
