CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
The GLPI Agent universal control agent vulnerability involves modifying GLPI-Agent code or
allows a DLL to be used to modify the agent’s logic. Exploitation of the vulnerability could allow an attacker to
privilege escalation
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
redos | 7.3 | x86_64 | glpi-agent | < 1.8-1 | UNKNOWN |