ALT-PU-2014-2228

Низкий

ALT-PU-2014-2228: package glpi update to version 0.84.7-alt1

Источник

errata.altlinux.org

Дата публикации

01.10.2014

Дата обновления

01.10.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades glpi to version 0.84.7-alt1.

Устраненные уязвимости1

CVE-2014-5032

Средний 5

Дата публикации: 14.04.2015

CWE-264

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2014-5032 https://nvd.nist.gov/vuln/detail/CVE-2014-5032

Ссылки1

ALT-PU-2014-2228 https://errata.altlinux.org/ALT-PU-2014-2228

Связанные уязвимости

CVE-2014-5032

ubuntu

больше 11 лет назад

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

CVE-2014-5032

nvd

больше 11 лет назад

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

CVE-2014-5032

debian

больше 11 лет назад

GLPI before 0.84.7 does not properly restrict access to cost informati ...

GHSA-j5q8-29xm-2qr8

github

больше 4 лет назад

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.