ALT-PU-2022-1914: package glpi update to version 10.0.0-alt1
Описание
This update upgrades glpi to version 10.0.0-alt1.
Устраненные уязвимости5
Связанные уязвимости
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.
GLPI is a Free Asset and IT Management Software package, that provides ...
ALT-PU-2022-2177: package `glpi` update to version 9.5.8-alt1
Уязвимость системы работы с заявками и инцидентами GLPI, связанная c недостаточной защитой учетных данных, позволяющая нарушителю получить несанкционированный доступ к паролю для root dn