CVE-2023-34254

Summary

CVE-2023-34254 is a vulnerability affecting the GLPI Agent prior to version 1.5. If an administrator user on a remote Unix system interacts with the agent during a remoteinventory task using SSH commands, they can inject harmful commands. Since the agent may run with administrative privileges, a successful attack could grant the malicious user high-level access to the targeted computer, potentially resulting in serious data breaches or system compromises. Additionally, the attacker could disclose all remote accesses configured for the remoteinventory task, posing a significant security risk. This vulnerability has been addressed in the latest GLPI Agent release, version 1.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.