New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permission omission in multiport_bits_separate #6101

Closed
maniacek opened this Issue Mar 6, 2017 · 1 comment

Comments

Projects
None yet
2 participants
@maniacek

maniacek commented Mar 6, 2017

DO NOT DELETE THIS INFORMATION.

Please read this information carefully.

GitHub issues is for bugs, please do not post issues asking for help or how to do X, Y or Z.
You can use our irc channel ##librenms on freenode to ask questions or our community site.
If you have a feature request please post this on our community site.

Please confirm each of the sections below by putting an x in the box like [x].

  • Is your install up to date? Updating your install
    Please do not submit an issue if your install is not up to date within the last 24 hours or on a stable monthly release.
  • Please include all of the information between the ==================================== section of ./validate.php which you can run from the cli.

LibreNMS | db58fea
DB Schema | 171
PHP | 5.6.30
MySQL | 5.6.35
RRDTool | 1.6.0
SNMP | NET-SNMP 5.7.3

  • Please provide ALL info asked for here.
  • Please provide as much detail as possible.
  • Please do NOT post more than 10 lines of debug information here, use a pastebin service or GitHub Gists.

anyone (without permisson to device or port ) can view all bits graph on "graphs/id=[xxx]/type=multiport_bits_separate" where [xxx] is port_bits port

@laf laf added Bug 🐞 Security WebUI and removed Bug 🐞 labels Mar 6, 2017

@laf laf self-assigned this Mar 6, 2017

laf added a commit to laf/librenms that referenced this issue Mar 6, 2017

@murrant murrant closed this in #6109 Mar 9, 2017

murrant added a commit that referenced this issue Mar 9, 2017

security: Stop multiport_bits_separate graphs for showing regardless …
…of auth #6101 (#6109)

* security: Stop multiport_bits_separate graphs for showing regardless of auth #6101

* updated
@lock

This comment has been minimized.

Show comment
Hide comment
@lock

lock bot May 17, 2018

This thread has been automatically locked since there has not been any recent activity after it was closed.

lock bot commented May 17, 2018

This thread has been automatically locked since there has not been any recent activity after it was closed.

@lock lock bot locked as resolved and limited conversation to collaborators May 17, 2018

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.