Linux Distros Unpatched Vulnerability : CVE-2024-38370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without...

CVE-2024-38370

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16...

CVE-2024-38370

creationtimestamp| type| source ---|---|--- 2024-11-15 21:24:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113489075470257480 2024-11-16 00:09:57+00:00| seen| https://t.me/cvedetector/11192...

CVE-2024-38370 GLPI allows API document download without rights

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16...