phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::check_permission. Attackers can open customer objects.php, single-location.php or nat_details.php to read IP addresses, CIDRs, hostnames and MAC addresses from sections they cannot access.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 6
https://github.com/phpipam/phpipam
disclosure@vulncheck.com
https://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb94877…
disclosure@vulncheck.com
https://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb94877…
disclosure@vulncheck.com
https://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb94877…
disclosure@vulncheck.com
https://hackmd.io/@haind/phpipam-tools-cross-section-address-disclosure
disclosure@vulncheck.com
https://www.vulncheck.com/advisories/phpipam-through-1.8.3-missing-authorizatio…
disclosure@vulncheck.com