Lucene search

K
freebsdFreeBSD7C769C89-53C2-11E1-8E52-00163E22EF61
HistoryJul 20, 2011 - 12:00 a.m.

glpi -- remote attack via crafted POST request

2011-07-2000:00:00
vuxml.freebsd.org
18

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.007

Percentile

80.4%

The GLPI project reports:

The autocompletion functionality in GLPI before 0.80.2 does not
blacklist certain username and password fields, which allows
remote attackers to obtain sensitive information via a crafted
POST request.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchglpi< 0.80.2UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.007

Percentile

80.4%

Related for 7C769C89-53C2-11E1-8E52-00163E22EF61