CVE-2024-38370
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 285
Summary
CVE-2024-38370 is a vulnerability affecting GLPI, a free IT management software. In versions prior to 11.0.0 and starting from 9.2.0, the API allows unauthorized downloads of documents without the necessary permissions. This issue poses a potential security risk and can be mitigated by upgrading to GLPI version 10.0.16.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GLPI Project
Affected Vendors
- Teclib