Name of the Vulnerable Software and Affected Versions:

GLPI versions 0.65 through 10.0.18

Description:

GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use the external links feature to access information on items they are not authorized to view.

Recommendations:

Update to version 10.0.19 or later.