Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-7633

Критический

ALT-PU-2023-7633: package glpi update to version 10.0.10-alt1

Источник
errata.altlinux.org
Дата публикации
07.12.2023
Дата обновления
04.02.2026
Устраненные уязвимости
100

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades glpi to version 10.0.10-alt1.

Устраненные уязвимости100

Связанные уязвимости

CVSS3: 7.5
altlinux
больше 4 лет назад

ALT-PU-2022-1914: package `glpi` update to version 10.0.0-alt1

CVSS3: 9.8
redos
больше 2 лет назад

Множественные уязвимости glpi

CVSS3: 7.5
ubuntu
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.

CVSS3: 7.5
nvd
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.

CVSS3: 7.5
debian
больше 4 лет назад

GLPI is a Free Asset and IT Management Software package, that provides ...