Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-31068

Опубликовано: 28 июн. 2022
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Версия от 10.0.0 (включая) до 10.0.2 (исключая)

EPSS

Процентиль: 60%
0.004
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade.

CVSS3: 5.3
debian
больше 3 лет назад

GLPI is a Free Asset and IT Management Software package, Data center m ...

EPSS

Процентиль: 60%
0.004
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo