Impact

A user with write access to another user can make requests to change the latter's password and then take control of their account.

Patches

Upgrade to 10.0.10.

For more information

If you have any questions or comments about this advisory, mail us at glpi-security@ow2.org.