ROS-20251007-04

🗓️ 07 Oct 2025 00:00:00Reported by RedosType

redos

redos🔗 redos.red-soft.ru👁 3 Views

GLPI request, incident and inventory system suffers remote authorization bypass and leakage.

Reporter	Title	Published	Views	Family All 96
bdu_fstec	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to insufficient protection of registration data, allows a violator to gain unauthorized access to user records.	15 Oct 202500:00	–	bdu_fstec
bdu_fstec	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to errors in access control, allows a intruder to gain unauthorized access to protected information.	15 Oct 202500:00	–	bdu_fstec
bdu_fstec	The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to errors in access control, allows a intruder to gain unauthorized access and delete protected information.	15 Oct 202500:00	–	bdu_fstec
bdu_fstec	The vulnerability of the system’s external link function for requests, incidents, and inventory management of computer equipment in GLPI allows a hacker to disclose protected information.	15 Oct 202500:00	–	bdu_fstec
bdu_fstec	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to bypassing authentication using a key, allows unauthorized users to gain unauthorized access and modify protected information.	20 Oct 202500:00	–	bdu_fstec
circl	CVE-2025-53111	30 Jul 202514:46	–	circl
cnnvd	GLPI 安全漏洞	30 Jul 202500:00	–	cnnvd
cnnvd	GLPI 安全漏洞	30 Jul 202500:00	–	cnnvd
cnnvd	GLPI 安全漏洞	30 Jul 202500:00	–	cnnvd
cnnvd	GLPI 安全漏洞	30 Jul 202500:00	–	cnnvd

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	glpi	10.0.19-1	UNKNOWN

07 Oct 2025 00:00Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.16.5

EPSS0.00256

SSVC

computer equipment requests incident management system inventory system remote authorization bypass credential leakage