Логотип exploitDog
bind: "CVE-2023-23610"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2023-23610"

Количество 5

Количество 5

ubuntu логотип

CVE-2023-23610

около 3 лет назад

GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-23610

около 3 лет назад

GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-23610

около 3 лет назад

GLPI is a Free Asset and IT Management Software package. Versions prio ...

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2024-05827

около 3 лет назад

Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильным управлением привилегиями, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 6.5
EPSS: Низкий
redos логотип

ROS-20240729-07

больше 1 года назад

Множественные уязвимости glpi

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-23610

GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.

CVSS3: 6.5
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-23610

GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.

CVSS3: 6.5
0%
Низкий
около 3 лет назад
debian логотип
CVE-2023-23610

GLPI is a Free Asset and IT Management Software package. Versions prio ...

CVSS3: 6.5
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2024-05827

Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильным управлением привилегиями, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 6.5
0%
Низкий
около 3 лет назад
redos логотип
ROS-20240729-07

Множественные уязвимости glpi

CVSS3: 6.5
больше 1 года назад

Уязвимостей на страницу