CVE-2021-25931
Description
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at `/opennms/admin/userGroupView/users/updateUser`. This flaw allows assigning `ROLE_ADMIN` security role to a normal user. Using this flaw, an attacker can trick the admin user to assign administrator privileges to a normal user by enticing him to click upon an attacker-controlled website.
How to fix
- opennms horizon27.1.1 or later
- opennms meridian2019.1.19, 2020.1.7 or later
- org.opennms:opennms27.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opennms horizon | 1.0 ≤ v < 27.1.1 | 27.1.1 |
| opennms meridian | 2015.1.0 ≤ v < 2019.1.19, 2020.1.0 ≤ v < 2020.1.7 | 2019.1.19, 2020.1.7 |
| org.opennms:opennmsMaven | 1.0.0 ≤ v < 27.1.1 | 27.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.