CVE-2014-5032

Опубликовано: 14 апр. 2015

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

Версия до 0.84.6 (включая)

EPSS

Процентиль: 59%

0.00388

Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-5032

ubuntu

почти 11 лет назад

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

CVE-2014-5032

debian

почти 11 лет назад

GLPI before 0.84.7 does not properly restrict access to cost informati ...

GHSA-j5q8-29xm-2qr8

github

больше 3 лет назад

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

EPSS

Процентиль: 59%

0.00388

Низкий

5 Medium

CVSS2

Дефекты

CWE-264