Lucene search
+L

3 matches found

osv_ubuntu
osv_ubuntu
•added 2026/02/04 6:16 p.m.•27 views

UBUNTU-CVE-2026-23624

GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...

6.5CVSS6.3AI score0.00428EPSS
SaveExploits0References5
Mend
Mend
•added 2026/02/04 5:15 p.m.•8 views

CVE-2026-23624

GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...

6.5CVSS6.3AI score0.00428EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•8 views

CVE-2026-23624: Session Fixation

GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...

6.5CVSS6.3AI score0.00428EPSS
SaveExploits0References1
Rows per page
Query Builder