The vulnerability of the GLPI system’s request and incident handling process, related to improper authorization, allows a malicious actor to escalate their privileges within the application.

The vulnerability of the GLPI request and incident handling system is related to the absence of an authorization mechanism that allows users with the “Technical Specialist” profile to view and generate a personal token for the superadministrator. Exploiting this vulnerability could enable a...