PT-2023-6824 · Glpi+2 · Glpi+2

Jbms-Syn · Published 2023-09-26 · Updated 2024-05-22 · CVE-2023-41322

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.10

Description The issue is related to inadequate access control in the GLPI system, which provides ITIL Service Desk features, licenses tracking, and software auditing. A user with write access to another user's account can make requests to change the latter's password and then take control of their account. This can allow a remote attacker to gain unauthorized access to another user's account.

Recommendations For versions prior to 10.0.10, upgrade to version 10.0.10 to resolve the issue. As a temporary workaround, consider restricting write access to user accounts to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-264

CWE-284

CWE-269

Related Identifiers

ALT-PU-2023-6186

ALT-PU-2023-7633

ALT-PU-2024-8030

BDU:2023-07698

CVE-2023-41322

GHSA-9J8M-7563-8XVR

Affected Products

Alt Linux

Glpi

Red Os

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glpi_htmlawed_php_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41322.json · Exploit
• 🔥 https://github.com/cosad3s/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/cactuschibre/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/Wangyanan131/CVE-2022-31061 · Exploit
• 🔥 https://github.com/Vu0r1-sec/CVE-2022-31061 · Exploit
• https://github.com/glpi-project/glpi/security/advisories/GHSA-9j8m-7563-8xvr · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07698 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41322 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41322 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-41322 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-41322 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-41322 · Security Note
• https://redos.red-soft.ru/support/secure · Note
• https://twitter.com/Synacktiv/status/1719698341066355151 · Twitter Post