CVE-2024-0787 is a medium-severity vulnerability in phpIPAM versions prior to 1.7.0, allowing attackers to bypass IP block mechanisms. This is achieved by manipulating the 'X-Forwarded-For' header, enabling brute-force password attacks against user accounts, including administrators. The attack requires low complexity and can lead to unauthorized access to sensitive information. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.7.0CPE matchmatch criteria | cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.