PT-2024-15819 · Phpipam · Phpipam

Published 2024-11-15 · Updated 2024-11-19 · CVE-2024-0787

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpIPAM version 1.5.1

Description The issue allows an attacker to bypass the IP block mechanism, enabling brute force attacks on user accounts, including the admin account, by utilizing the 'X-Forwarded-For' header. This is due to the get user ip() function in 'class.Common.php' checking for and using the 'X-Forwarded-For' header instead of 'REMOTE ADDR'. The vulnerability enables attackers to perform brute force attacks on user accounts.

Recommendations For phpIPAM version 1.5.1, update to version 1.7.0 to resolve the issue. As a temporary workaround, consider modifying the get user ip() function in 'class.Common.php' to prioritize 'REMOTE ADDR' over the 'X-Forwarded-For' header to prevent IP block bypass.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2024-0787

Affected Products

Phpipam

References · 7

• 🔥 https://huntr.com/bounties/840cb582-1feb-43ab-9cc4-e4b5a63c5bab · Exploit
• https://github.com/phpipam/phpipam/commit/55c2056068be9f1359e967fcff64db6b7f4d00b5 · Patch
• https://osv.dev/vulnerability/CVE-2024-0787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0787 · Security Note
• https://twitter.com/CVEnew/status/1857381722696118529 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857435556851929436 · Twitter Post
• https://t.me/cvedetector/11058 · Telegram Post