PT-2023-3259 · Glpi+2 · Glpi+2

Smaury · Published 2023-04-05 · Updated 2024-05-22 · CVE-2023-28634

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.5.13 GLPI versions prior to 10.0.7

Description The issue is related to a lack of authorization, allowing a user with the Technician profile to view and generate a personal token for a Super-Admin. This can be exploited to negotiate a GLPI session and hijack the Super-Admin account, resulting in a privilege escalation.

Recommendations For versions prior to 9.5.13, update to version 9.5.13 or later to resolve the issue. For versions prior to 10.0.7, update to version 10.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the personal token generation feature for users with the Technician profile until a patch is applied.

Exploit

Fix

Improper Authorization

Incorrect Authorization

Weakness Enumeration

CWE-285

CWE-863

Related Identifiers

ALT-PU-2023-1801

ALT-PU-2023-1932

ALT-PU-2023-2081

ALT-PU-2023-5122

ALT-PU-2023-7633

ALT-PU-2024-8030

ALT-PU-2024-8094

BDU:2023-03380

CVE-2023-28634

GHSA-4279-RXMH-GF39

Affected Products

Alt Linux

Glpi

Red Os

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28634.json · Exploit
• https://github.com/glpi-project/glpi/releases/tag/9.5.13 · Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.7 · Patch
• https://github.com/glpi-project/glpi/security/advisories/GHSA-4279-rxmh-gf39 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28634 · Security Note
• https://ubuntu.com/security/CVE-2023-28634 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/691634 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-28634 · Security Note
• https://bdu.fstec.ru/vul/2023-03380 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-28634 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28634 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-glpi-cve-2023-28855-cve-2023-28852-cve-2023-28849-cve-2023-28838-cve-2023 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-glpi-cve-2023-28855-cve-2023-28852-cve-2023-28849-cve-2023-28838-cve-2023 · Note