Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-2291

Критический

ALT-PU-2022-2291: package glpi update to version 10.0.2-alt1

Источник
errata.altlinux.org
Дата публикации
23.07.2022
Дата обновления
23.07.2022
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades glpi to version 10.0.2-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade.

CVSS3: 9.8
nvd
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade.

CVSS3: 9.8
debian
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, Data center m ...

CVSS3: 10
altlinux
почти 3 года назад

ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1

CVSS3: 5.3
ubuntu
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade.