Linux Distros Unpatched Vulnerability : CVE-2023-35940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file allows an...

CVE-2023-35940

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file allows an unauthenticated user to be able to access dashboards data. Version 10.0.8 contains a patch for this issue...

CVE-2023-35940

GLPI vulnerability CVE-2023-35940 concerns an incorrect rights check on a file that, in versions prior to 10.0.8 (and starting from 9.5.0), could allow an unauthenticated user to access dashboards data. The issue is mitigated by the 10.0.8 patch. Several connected sources confirm GLPI versions be...