Security fix for the ALT Linux 9 package glpi version 9.5.3-alt1

9.5.3-alt1 built Dec. 26, 2020 Pavel Zilke in task 263876 Dec. 5, 2020 Pavel Zilke - New version 9.5.3 - This is a security release, upgrading is recommended - Security fixes: + CVE-2020-27662 : Insecure Direct Object Reference on ajax/comments.php + CVE-2020-27663 : Insecure Direct Object...

Security fix for the ALT Linux 10 package glpi version 9.5.3-alt1

Dec. 5, 2020 Pavel Zilke 9.5.3-alt1 - New version 9.5.3 - This is a security release, upgrading is recommended - Security fixes: + CVE-2020-27662 : Insecure Direct Object Reference on ajax/comments.php + CVE-2020-27663 : Insecure Direct Object Reference on ajax/getDropdownValue.php + CVE-2020-262...

CVE-2020-26212

creationtimestamp| type| source ---|---|--- 2020-11-25 20:48:06+00:00| seen| https://t.me/cibsecurity/16855...

CVE-2020-26212

GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.3, any authenticated user has read-only permissions to the planning of...

CVE-2020-26212

Technical details about CVE-2020-26212 (affected GLPI versions, root cause, exploitability) are not present in the provided connected documents. The Initial Description notes the fix in 9.5.3 and a CalDAV workaround, but no further public details are available here. Monitor for updates.