CVE-2019-10231

NONE EPSS 79.2%
Published Mar 27, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 27, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).

Threat Intelligence

EPSS Exploit Probability
79.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-843

Affected Products 1

VendorProductVersionRange
teclib-editiongestionnaire_libre_de_parc_informatique* <9.4.1.1

References 2

  • github.com https://github.com/glpi-project/glpi/pull/5520
    PatchThird Party Advisory
  • github.com https://github.com/glpi-project/glpi/releases/tag/9.4.1.1
    Release NotesThird Party Advisory

Remediation

  • github.com https://github.com/glpi-project/glpi/pull/5520
    PatchThird Party Advisory