Lucene search

Updated glpi packages fix security vulnerabilities

🗓️ 24 May 2020 21:47:04Reported by Gentoo FoundationType

Updated GLPI packages fix security vulnerabilities related to user data exposure, open redirect bypass, insecure CSRF token generation, and stored XSS issue

Reporter	Title	Published	Views	Family All 39
Fedora	[SECURITY] Fedora 31 Update: glpi-9.4.6-1.fc31	14 May 202002:29	–	fedora
Fedora	[SECURITY] Fedora 32 Update: glpi-9.4.6-1.fc32	14 May 202002:37	–	fedora
Tenable Nessus	Fedora 31 : glpi (2020-885e2343ed)	14 May 202000:00	–	nessus
Tenable Nessus	FreeBSD : glpi -- able to read any token through API user endpoint (aec9cbe0-3b0f-11eb-af2a-080027dbe4b7)	14 Dec 202000:00	–	nessus
Tenable Nessus	FreeBSD : glpi -- multiple related stored XSS vulnerabilities (27a230a2-3b11-11eb-af2a-080027dbe4b7)	14 Dec 202000:00	–	nessus
Tenable Nessus	FreeBSD : glpi -- bypass of the open redirect protection (3a63f478-3b10-11eb-af2a-080027dbe4b7)	14 Dec 202000:00	–	nessus
Tenable Nessus	FreeBSD : glpi -- weak csrf tokens (b64edef7-3b10-11eb-af2a-080027dbe4b7)	14 Dec 202000:00	–	nessus
OpenVAS	Fedora: Security Advisory for glpi (FEDORA-2020-885e2343ed)	15 May 202000:00	–	openvas
OpenVAS	Fedora: Security Advisory for glpi (FEDORA-2020-ee30e1109f)	15 May 202000:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2020-0220)	28 Jan 202200:00	–	openvas

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
github	www.github.com/glpi-project/glpi/security/advisories/GHSA-rf54-3r4w-4h55
github	www.github.com/glpi-project/glpi/security/advisories/GHSA-gxv6-xq9q-37hg
github	www.github.com/glpi-project/glpi/security/advisories/GHSA-w7q8-58qp-vmpf
github	www.github.com/glpi-project/glpi/security/advisories/GHSA-3g3h-rwhr-7385
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	7	noarch	glpi	9.4.5-1.2	glpi-9.4.5-1.2.mga7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2020 21:04Current

1.2Low risk

Vulners AI Score1.2

CVSS26.4

CVSS37.6 - 9.3

EPSS0.00315