Поиск уязвимостей
Количество 7
Количество 7
CVE-2022-24867
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.
CVE-2022-24867
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue.
CVE-2022-24867
GLPI is a Free Asset and IT Management Software package, that provides ...
BDU:2024-05821
Уязвимость системы работы с заявками и инцидентами GLPI, связанная c недостаточной защитой учетных данных, позволяющая нарушителю получить несанкционированный доступ к паролю для root dn
ALT-PU-2022-1914
ALT-PU-2022-1914: package `glpi` update to version 10.0.0-alt1
ROS-20240726-01
Множественные уязвимости glpi
ALT-PU-2023-7633
ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-24867 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-24867 GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filtered and when you look at the source code of the rendered page, we can see the password for the root dn. Users are advised to upgrade. There is no known workaround for this issue. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-24867 GLPI is a Free Asset and IT Management Software package, that provides ... | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
 | BDU:2024-05821 Уязвимость системы работы с заявками и инцидентами GLPI, связанная c недостаточной защитой учетных данных, позволяющая нарушителю получить несанкционированный доступ к паролю для root dn | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-1914 ALT-PU-2022-1914: package `glpi` update to version 10.0.0-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
 | ROS-20240726-01 Множественные уязвимости glpi | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2023-7633 ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1 | CVSS3: 10 | почти 3 года назад |
Уязвимостей на страницу