VULNERABILITY INTELLIGENCE

CVE-2024-27930

CVSS score6.5 MEDIUM

EPSS probability1.14%

CISA KEVNot currently listed

Published2024-03-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can access sensitive fields data from items on which he has read access. This issue has been patched in version 10.0.13.

Weakness classification

security-advisories@github.com: CWE-285
nvd@nist.gov: NVD-CWE-noinfo

Primary references

security-advisories@github.com — Exploit
security-advisories@github.com — Patch
security-advisories@github.com — Release Notes
security-advisories@github.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory