Vulnerabilities > CVE-2020-15217 - Unspecified vulnerability in Glpi-Project Glpi 9.5.0/9.5.1

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
glpi-project
NVD
Published: 2020-10-07
Updated: 2024-11-21

Summary

In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to the FAQ.

Vulnerable Configurations

Part Description Count
Application
Glpi-Project
2

References