CVE-2020-7988: CSRF
Published Mar 4, 2020
·Updated
An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and functionality. This issue exists due to the lack of a requirement to provide the old password, and the lack of security tokens.
Affected Software
1 affected component
Phpipam Phpipam=1.4
Event History
Mar 4, 2020
CVE Published
via MITRE·04:07 PM
Data Sourced
via MITRE·04:07 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the phpIPAM issue?
The vulnerability ID for the phpIPAM issue is CVE-2020-7988.
2
What is the severity of CVE-2020-7988?
The severity of CVE-2020-7988 is high with a CVSS score of 8.8.
3
How can the phpIPAM vulnerability be exploited?
The phpIPAM vulnerability can be exploited using CSRF to change the password of any user/admin, escalate privileges, and gain access to more data and functionality.
4
Which software versions are affected by CVE-2020-7988?
The versions affected by CVE-2020-7988 are phpIPAM 1.4.
5
Are there any fixes or patches available for phpIPAM CVE-2020-7988?
Yes, phpIPAM has released version 1.5 which includes a fix for CVE-2020-7988.