CVE-2019-10233

Опубликовано: 27 мар. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.

Ссылки

https://github.com/glpi-project/glpi/pull/5562
Patch
Third Party Advisory
https://github.com/glpi-project/glpi/releases/tag/9.4.1.1
Release Notes
Third Party Advisory
https://github.com/glpi-project/glpi/pull/5562
Patch
Third Party Advisory
https://github.com/glpi-project/glpi/releases/tag/9.4.1.1
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

Версия до 9.4.1.1 (исключая)

EPSS

Процентиль: 72%

0.01387

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-203

Связанные уязвимости

CVE-2019-10233

CVSS3: 8.1

ubuntu

больше 7 лет назад

Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.

CVE-2019-10233

CVSS3: 8.1

debian

больше 7 лет назад

Teclib GLPI before 9.4.1.1 is affected by a timing attack associated w ...

GHSA-x4jv-r6hp-xc4h

CVSS3: 8.1

github

больше 4 лет назад

Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.

ALT-PU-2019-1662

CVSS3: 8.1

altlinux

больше 7 лет назад

ALT-PU-2019-1662: package `glpi` update to version 9.4.2-alt1

EPSS

Процентиль: 72%

0.01387

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-203