GLPI Deserialization Code Execution

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

GLPI Code Execution

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

GLPI Improper Session Management Session Interception

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...

GLPI Authorization Bypass

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to deficiencies in authorization procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GLPI Authentication Bypass

The vulnerability of the GLPI system for requests, incidents, and inventory management involves bypassing authentication using a password. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

GLPI Access Control Unauthorized Access

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GLPI Request Inventory Script Injection Code Execution

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the failure to remove script-related HTML tags from the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

GLPI XSS

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management functions is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

GLPI Improper Access Control Account Bypass

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to improper access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the account through the API...

GLPI Information Disclosure

The vulnerability of the application software interface of the GLPI system for requests, incidents, and inventory management is related to improper access control. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

GLPI SQL Injection Code Execution

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of protective measures for the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

GLPI Authorization Bypass Info Disclosure

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in authorization procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

GLPI Code Execution

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to incorrect neutralization of certain elements in the output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

GLPI Insecure Privilege Management Unauthorized Access

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the account of any user...

GLPI Information Disclosure

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

GLPI Information Disclosure

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

How to configure WEM load balance

This article guides you through the deployment of a Workspace Environment Management WEM server group containing two or more infrastructure servers in all active load balanced configurations. The article provides details of how to configure a Citrix ADC appliance to load balance incoming requests...

GLPI Access Control Modification View

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to lack of access control. Exploiting this vulnerability allows a malicious actor to modify or view data on the control panel remotely...

Online Fire Reporting System SQL Injection

The vulnerability of the network software system, Online Fire Reporting System, is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the...

[SECURITY] Fedora 24 Update: rt-4.2.13-2.fc24

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...