Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-7685
4
MEDIUMCVSS v2
Published
October 5, 2015
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter to front/user.form.php.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.<= 0.85.2NVD