CVE-2024-27930

CVSS V2 None CVSS V3 None

Description

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can access sensitive fields data from items on which he has read access. This issue has been patched in version 10.0.13.

Overview

CVE ID
CVE-2024-27930

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-03-18T15:29:11.382Z

Last Modified Date
2024-04-24T14:39:50.719Z

Weakness Enumerations

CWE	URL
CWE-285	http://cwe.mitre.org/data/definitions/285.html

References

Reference URL	Reference Tags
https://github.com/glpi-project/glpi/security/advisories/GHSA-82vv-j9pr-qmwq	x_refsource_CONFIRM
https://github.com/glpi-project/glpi/commit/1942b70b2422fff51822f6eb3af500c94760871e	x_refsource_MISC
https://borelenzo.github.io/stuff/2024/02/29/glpi-pwned.html	x_refsource_MISC
https://github.com/glpi-project/glpi/releases/tag/10.0.13	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-27930
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27930

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 01:44:46				Added to TrackCVE