CVE-2019-10231: Critical severity glpi vulnerability
Published Mar 27, 2019
·Updated
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).
Affected Software
1 affected component
Teclib-edition Gestionnaire Libre De Parc Informatique<9.4.1.1
Remediation
Patch Available
Event History
Mar 27, 2019
CVE Published
via MITRE·04:22 PM
Data Sourced
via MITRE·04:22 PM
Description
Frequently Asked Questions
1
What is CVE-2019-10231?
CVE-2019-10231 is a PHP type juggling vulnerability in Teclib GLPI before version 9.4.1.1 that allows bypass of authentication.
2
How severe is CVE-2019-10231?
CVE-2019-10231 has a severity rating of 9.8 (Critical).
3
What software is affected by CVE-2019-10231?
Teclib GLPI before version 9.4.1.1 is affected by CVE-2019-10231.
4
How can the PHP type juggling vulnerability be exploited in Teclib GLPI?
The PHP type juggling vulnerability in Teclib GLPI allows an attacker to bypass authentication.
5
Is there a fix for CVE-2019-10231?
Yes, Teclib GLPI released version 9.4.1.1 which fixes the PHP type juggling vulnerability.