CVE-2019-14666
N/A
N/A
Summary
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.tarlogic.com/advisories/Tarlogic-2019-GPLI-Account-Takeover.txt
- https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5q
References
- https://www.tarlogic.com/advisories/Tarlogic-2019-GPLI-Account-Takeover.txt
- https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5q
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.