Authentication via SQL injection

Critical

trasher published GHSA-7p3q-cffg-c8xh

Sep 14, 2022

Package

glpi (glpi)

Affected versions

>= 9.1

Patched versions

10.0.3

Description

Impact

Attacker can simulate a login to any user having a defined API token, using an SQL injection in authentication process.

Patches

Upgrade GLPI to 10.0.3.

Workarounds

Disable Enable login with external token API configuration.

References

.

Severity

Critical

10.0

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H