CVE-2023-34106

Summary

CVE-2023-34106 is a vulnerability affecting GLPI, a popular free asset and IT management software. Versions of GLPI starting from 0.68 up to and including 10.0.7 contain a flaw that incorrectly checks file permissions. As a result, an authenticated user can gain unauthorized access to sensitive data - specifically, the list of all users and their personal information. To mitigate this risk, users are advised to upgrade to the latest version, 10.0.8, which includes a patch to resolve this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.