Описание
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| glpi | removed | package |
Примечания
https://github.com/glpi-project/glpi/pull/5562
Only supported behind an authenticated HTTP zone
Связанные уязвимости
CVSS3: 8.1
ubuntu
больше 7 лет назад
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
CVSS3: 8.1
nvd
больше 7 лет назад
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
CVSS3: 8.1
github
больше 4 лет назад
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
CVSS3: 8.1
altlinux
больше 7 лет назад
ALT-PU-2019-1662: package `glpi` update to version 9.4.2-alt1