CVE-2014-5032

Published: Apr 14, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

Affected (1)

Products: Glpi Project: Glpi

Glpi Project

1 product

Glpi

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Glpi Project Glpi	Up to 0.84.6

Related CWEs

CWE-264

References (8)

http://advisories.mageia.org/MGASA-2015-0017.html

Source: cve@mitre.org

http://www.glpi-project.org/spip.php?page=annonce&id_breve=325

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:167

Source: cve@mitre.org

https://forge.indepnet.net/issues/4984

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2015-0017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.glpi-project.org/spip.php?page=annonce&id_breve=325

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:167

Source: af854a3a-2127-422b-91ae-364da2661108

https://forge.indepnet.net/issues/4984

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.