CyberRota Analysis
AI-GeneratedThe vulnerability allows any authenticated user to bypass CONFIGURATION_EDIT permissions on admin API read endpoints in phpMyFAQ versions prior to 4.1.7, exposing sensitive administrative data related to LDAP, Elasticsearch, OpenSearch, and dashboard configurations. This could lead to unauthorized access to critical information such as LDAP server topology and site analytics. Organizations using phpMyFAQ should prioritize patching to mitigate the risk of data exposure and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind account names, search bases, index statistics, and site analytics by calling these endpoints with a valid session.
Related CVEs
Other vulnerabilities affecting the same vendor(s)