Lucene search
PRIOn knowledge basePRION:CVE-2023-22500HistoryJan 26, 2023 - 9:18 p.m.
Authorization
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
5
glpi
free asset
it management
versions 10.0.0
10.0.6
incorrect authorization
unauthorized access
inventory files
faq
unauthenticated users
patch
workaround
delete inventory files
0.001 Low
EPSS
Percentile
49.8%
GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorization. This vulnerability allow unauthorized access to inventory files. Thus, if anonymous access to FAQ is allowed, inventory files are accessbile by unauthenticated users. This issue is patched in version 10.0.6. As a workaround, disable native inventory and delete inventory files from server (default location is files/_inventory).
Related
ubuntucve
ubuntucve
CVE-2023-22500
2023-01-26 00:00:00
nvd
nvd
CVE-2023-22500
2023-01-26 21:18:12
osv
osv
CVE-2023-22500
2023-01-26 21:18:12
cve
cve
CVE-2023-22500
2023-01-26 21:18:12
cvelist
cvelist
CVE-2023-22500 glpi Unauthorized access to inventory files
2023-01-25 06:03:56