Ubuntu.comUB:CVE-2024-27930CVE-2024-27930
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
15.5%
GLPI is a Free Asset and IT Management Software package, Data center
management, ITIL Service Desk, licenses tracking and software auditing. An
authenticated user can access sensitive fields data from items on which he
has read access. This issue has been patched in version 10.0.13.
References
github.com/glpi-project/glpi/commit/1942b70b2422fff51822f6eb3af500c94760871e
github.com/glpi-project/glpi/releases/tag/10.0.13
github.com/glpi-project/glpi/security/advisories/GHSA-82vv-j9pr-qmwq
launchpad.net/bugs/cve/CVE-2024-27930
nvd.nist.gov/vuln/detail/CVE-2024-27930
security-tracker.debian.org/tracker/CVE-2024-27930
www.cve.org/CVERecord?id=CVE-2024-27930
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
15.5%