Skip to content
OpenAdvisories

Vendor

The OpenNMS Group

25 known vulnerabilities.

Products

Meridian 24 Horizon 23
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40315 Public exploit

    ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

    In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. The solution is to upgrade to Meridian 2023.1.5 or Hor…

    The OpenNMS Group Meridian Horizon org.opennms:opennms-webapp-rest Maven
  • High 8.2
    CVE-2023-0872 Public exploit

    ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

    The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of privilege. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizo…

    The OpenNMS Group Meridian Horizon org.opennms:opennms-webapp-rest Maven