weak csrf tokens

Moderate

trasher published GHSA-w7q8-58qp-vmpf

May 5, 2020

Package

glpi-project/glpi

Affected versions

> 0.83.3

Patched versions

9.4.6

Description

The CSRK tokens are weakly generated:

glpi/inc/session.class.php

Line 1141 in 6dc5cb6

$CURRENTCSRFTOKEN = md5(uniqid(rand(), true));

. rand and uniqid and of course MD5 do not provide secure values.

Impact

All GLPI versions since 0.83.3

Patches

Fixed in 039c184

Reference

https://offsec.almond.consulting/multiple-vulnerabilities-in-glpi.html

For more information

If you have any questions or comments about this advisory:

Open an issue in glpi-project/glpi
Email us at glpi-security@ow2.org