Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-34106
HistoryJul 05, 2023 - 6:15 p.m.

Design/Logic Flaw

2023-07-0518:15:00
PRIOn knowledge base
www.prio-n.com
3
glpi
software
incorrect rights check
user list
personal information
upgrade
patch
nvd

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should upgrade to version 10.0.8 to receive a patch.

CPENameOperatorVersion
glpige0.68
glpilt10.0.8

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

Related for PRION:CVE-2023-34106