Executive brief
LibreNMS is a network monitoring and management platform used to track infrastructure health and performance. A SQL injection vulnerability in the /ajax_table.php API endpoint allows authenticated users to extract sensitive information from the entire LibreNMS database, potentially exposing network device credentials, configuration details, and monitoring data.
Technical details
A SQL injection vulnerability exists in LibreNMS 1.65 in the /ajax_table.php API endpoint, specifically in the address parameter. An attacker with valid (normal user-level) authentication can inject arbitrary SQL queries to extract all database contents. The vulnerability requires prior authentication and network access to the LibreNMS API, but no further user interaction. The flaw was patched in version 1.65.1 via commit addressing SQL injection filters in the address and searchPhrase parameters.
Affected products
- LibreNMS LibreNMS 1.65
Timeline
- 2020-07-10: disclosed
- 2020-07-10: patched: Fixed in version 1.65.1