Lucene search

RedosROS-20240328-01

HistoryMar 28, 2024 - 12:00 a.m.

ROS-20240328-01

2024-03-2800:00:00

redos.red-soft.ru

glpi

asset management

data center management

software vulnerability

sql code injection

dashboard administration

remote attacker

arbitrary sql queries

unix

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

32.5%

JSON

GLPI’s asset management and data center management software vulnerability is related to the
SQL code injection through administration of dashboards. Exploitation of the vulnerability could
allow an attacker acting remotely to execute arbitrary SQL queries

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64glpi< 10.0.10-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	glpi	< 10.0.10-1	UNKNOWN

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

32.5%

JSON

Related for ROS-20240328-01