Ubuntu.comUB:CVE-2023-23610CVE-2023-23610
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
27.8%
GLPI is a Free Asset and IT Management Software package. Versions prior to
9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user
having access to the standard interface can export data of almost any GLPI
item type, even those on which user is not allowed to access (including
assets, tickets, users, …). This issue is patched in 10.0.6.
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
27.8%