CyberRota Analysis
AI-GeneratedThe vulnerability in phpIPAM versions up to 1.8.3 allows unauthorized access to user management functions due to improper authorization checks for the "admins" and "all" identifiers in the User API controller. This flaw can lead to privilege escalation, potentially allowing attackers to manipulate user roles and access sensitive information. Organizations using phpIPAM should prioritize patching this vulnerability to safeguard their network management systems against unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.