EUVD-2014-4931

Malware in sbrugna...

Information disclosure

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar...

CVE-2014-5032: Undefined Security Weakness

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar...

PT-2015-3786

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 0.84.7 Description The issue allows remote attackers to obtain sensitive information due to improper access restriction to cost information. This can be achieved via the cost criteria in the search bar. Recommendations F...