Lucene search
PRIOn knowledge basePRION:CVE-2023-23610HistoryJan 26, 2023 - 9:18 p.m.
Design/Logic Flaw
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
7
glpi
improper privilege management
data export
patched 10.0.6
0.001 Low
EPSS
Percentile
27.8%
GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, …). This issue is patched in 10.0.6.
Related
cve
cve
CVE-2023-23610
2023-01-26 21:18:14
osv
osv
CVE-2023-23610
2023-01-26 21:18:14
nvd
nvd
CVE-2023-23610
2023-01-26 21:18:14
cvelist
cvelist
CVE-2023-23610 glpi vulnerable to Unauthorized access to data export
2023-01-25 05:46:35
ubuntucve
ubuntucve
CVE-2023-23610
2023-01-26 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package glpi version 9.5.12-alt1
2023-03-29 00:00:00
Security fix for the ALT Linux 10 package glpi version 9.5.12-alt1
2023-03-22 00:00:00