Name of the Vulnerable Software and Affected Versions:

GLPI versions 0.78 through 10.0.18

Description:

GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user.

Recommendations:

Update to version 10.0.19 or later.