CVE-2024-0787
phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'get_user_ip()' function in 'class.Common.php' at lines 1044 and 1045, where the presence of the 'X-Forwarded-For' header is checked and used instead of 'REMOTE_ADDR'. This vulnerability allows attackers to perform brute force attacks on user accounts, including the admin account. The issue is fixed in version 1.7.0.
- Affected products
- Phpipam
- Phpipam
- < 1.7.0
- Fix
- Available
- CVSS 3.1
- 5.9 MEDIUM
- EPSS
- 0.5% (37th percentile)
- Weakness
- CWE-307
- NVD status
- Analyzed
- Published
- 2024-11-15
CVE-2024-0787 at NVD
No indexed exploits for CVE-2024-0787 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-0787 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.