Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-2720
5
MEDIUMCVSS v2
Published
August 5, 2011
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.= 0.72.4, = 0.72, = 0.72.1, = 0.72.2, = 0.70, = 0.70.1, = 0.6, = 0.71.5, = 0.68.2, <= 0.80.1, = 0.71.4, = 0.71.1, = 0.5, = 0.78.2, = 0.71, = 0.71.3, = 0.71.2, = 0.68, = 0.80, = 0.72.3, = 0.78.1, = 0.78, = 0.68.3, = 0.65, = 0.78.3, = 0.71.6, = 0.51a, = 0.51, = 0.78.5, = 0.78.4, = 0.70.2, = 0.68.1, = 0.42NVD