CVE-2022-0587 HIGH

CVE-2022-0587: Improper Authorization in librenms/librenms

Vendor Librenms

Product librenms/librenms

Weakness CWE-285

Published February 15, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

7.1/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Improper Authorization in Packagist librenms/librenms prior to 22.2.0.

Key dates

02Disclosure timeline

February 15, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0587 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

04Related CVE

CVE-2026-6556 @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins CVE-2026-3761 SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorization CVE-2026-9397 Besen BS20 EV Charging Station OTA Update Installation improper authorization CVE-2025-2345 IROAD Dash Cam X5/Dash Cam X6 improper authorization CVE-2021-24194 Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User