PT-2022-7395 · Glpi+2 · Glpi+2

Published 2022-09-15 · Updated 2024-07-26 · CVE-2022-39234

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.4

Description The issue is related to insufficient session expiration in the GLPI system, which can allow a remote attacker to impact the system's integrity. A deleted or deactivated user could continue to use their account as long as their cookie is valid.

Recommendations For versions prior to 10.0.4, upgrade to version 10.0.4 to resolve the issue. As a temporary workaround, consider restricting access to the system for deleted or deactivated users until the patch is applied. Avoid relying on cookie validity for session management until the issue is resolved.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

ALT-PU-2022-2614

ALT-PU-2022-2624

ALT-PU-2022-2665

ALT-PU-2022-3008

ALT-PU-2022-3078

ALT-PU-2022-3274

ALT-PU-2023-7633

ALT-PU-2024-8030

ALT-PU-2024-8094

BDU:2024-05807

CVE-2022-39234

GHSA-PGCX-MC58-3GMG

Affected Products

Alt Linux

Glpi

Red Os

References · 19

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glpi_htmlawed_php_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39234.json · Exploit
• 🔥 https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/POC_2022-35914.sh · Exploit
• 🔥 https://github.com/Orange-Cyberdefense/CVE-repository · Exploit
• 🔥 https://github.com/cosad3s/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/cactuschibre/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/Kitsun3Sec/exploits/tree/master/cms/GLPI/GLPI-stored-XSS · Exploit
• 🔥 https://github.com/Wangyanan131/CVE-2022-31061 · Exploit
• 🔥 https://github.com/Vu0r1-sec/CVE-2022-31061 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-39234 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-39234 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39234 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39234 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05807 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-39234 · Security Note