Threats tagged 'ghsa-5mrf-j8v6-f45g'

LibreNMS versions prior to 25.11.0 have a weak password policy vulnerability in the user management functionality. This flaw allows administrators to create user accounts with trivial passwords such as '12345678', which increases the risk of brute-force and credential stuffing attacks. The vulnerability does not directly impact confidentiality or availability but lowers the security posture by enabling easier unauthorized access. A fix is available in version 25.11.0 that presumably enforces stronger password requirements.