3 matches found
EUVD-2023-40429
Malicious code in bioql PyPI...
7.9CVSS5.6AI score0.00263EPSS
SaveExploits1References3
CVE-2020-5248
GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key before installing GLPI. But on existing instances, data mu...
7.2CVSS6.4AI score0.01529EPSS
SaveExploits2
Design/Logic Flaw
GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key before installing GLPI. But on existing instances, data mu...
5CVSS5.1AI score0.01529EPSS
SaveExploits2References2Affected Software1
20