Description (CNA)
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| phpipam / phpIPAM | affected 0 through 1.8.3 |
CWE
CWE-863
References
- https://github.com/phpipam/phpipam/releases/tag/v1.8.3
- https://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb948771/api/controllers/User.php#L143-L146
ADP enrichment
No English description supplied.
No references supplied.