CVE-2019-12530

2019-06-0217:29:01

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh.

CPENameOperatorVersion
glpi-dashboardeq0.9.3
glpi-dashboardeq0.9.6
glpi-dashboardeq0.9.1
glpi-dashboardeq0.8.8
glpi-dashboardeq0.9.0
glpi-dashboardeq0.9.4
glpi-dashboardeq0.9.2
glpi-dashboardeq0.9.7.rc1
glpi-dashboardeq0.9.7
glpi-dashboardeq0.8.9

Name	Operator	Version
glpi-dashboard	eq	0.9.3
glpi-dashboard	eq	0.9.6
glpi-dashboard	eq	0.9.1
glpi-dashboard	eq	0.8.8
glpi-dashboard	eq	0.9.0
glpi-dashboard	eq	0.9.4
glpi-dashboard	eq	0.9.2
glpi-dashboard	eq	0.9.7.rc1
glpi-dashboard	eq	0.9.7
glpi-dashboard	eq	0.8.9