Поиск уязвимостей
Количество 8
Количество 8
CVE-2023-23610
GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.
CVE-2023-23610
GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.
CVE-2023-23610
GLPI is a Free Asset and IT Management Software package. Versions prio ...
BDU:2024-05827
Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильным управлением привилегиями, позволяющая нарушителю раскрыть защищаемую информацию
ROS-20240729-07
Множественные уязвимости glpi
ALT-PU-2023-1490
ALT-PU-2023-1490: package `glpi` update to version 9.5.12-alt1
ALT-PU-2023-1471
ALT-PU-2023-1471: package `glpi` update to version 10.0.6-alt1
ALT-PU-2023-7633
ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-23610 GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6. | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
 | CVE-2023-23610 GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6. | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
| CVE-2023-23610 GLPI is a Free Asset and IT Management Software package. Versions prio ... | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
 | BDU:2024-05827 Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильным управлением привилегиями, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
 | ROS-20240729-07 Множественные уязвимости glpi | CVSS3: 6.5 | больше 2 лет назад | |
| ALT-PU-2023-1490 ALT-PU-2023-1490: package `glpi` update to version 9.5.12-alt1 | CVSS3: 6.5 | больше 3 лет назад | |
| ALT-PU-2023-1471 ALT-PU-2023-1471: package `glpi` update to version 10.0.6-alt1 | CVSS3: 7.5 | больше 3 лет назад | |
| ALT-PU-2023-7633 ALT-PU-2023-7633: package `glpi` update to version 10.0.10-alt1 | CVSS3: 10 | почти 3 года назад |
Уязвимостей на страницу