CVEvulnerability
CVE-2014-5032
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.
Affected configurations
• glpi-project glpi (<= 0.84.6)
Related
Weakness · not in database (1)
References
- http://advisories.mageia.org/MGASA-2015-0017.html advisories.mageia.org
- http://www.glpi-project.org/spip.php?page=annonce&id_breve=325 www.glpi-project.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:167 www.mandriva.com
- https://forge.indepnet.net/issues/4984 forge.indepnet.net
- http://advisories.mageia.org/MGASA-2015-0017.html advisories.mageia.org
- http://www.glpi-project.org/spip.php?page=annonce&id_breve=325 www.glpi-project.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:167 www.mandriva.com
- https://forge.indepnet.net/issues/4984 forge.indepnet.net