Security Advisory

CVE-2024-47758

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-11 15:50:22
Last updated 2024-12-11 17:10:22
Assigner GitHub_M
State PUBLISHED

Description

GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the API to take control of any user that have the same or a lower level of privileges. Version 10.0.17 contains a patch for this issue.