Beveiligingsadvies

CVE-2022-21720

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-01-28 10:15:14

Laatst bijgewerkt 2025-05-05 16:33:40

Toegewezen door GitHub_M

CVSS-score 4.9

Status PUBLISHED

Beschrijving

GLPI is a free asset and IT management software package. Prior to version 9.5.7, an entity administrator is capable of retrieving normally inaccessible data via SQL injection. Version 9.5.7 contains a patch for this issue. As a workaround, disabling the `Entities` update right prevents exploitation of this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗