CVE-2019-10231

Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-03-27

Last modified

2024-08-04

Weaknesses

CWE-843

Affected products

• Gestionnaire Libre De Parc Informatique (Teclib-edition)

References

• https://github.com/glpi-project/glpi/pull/5520
• https://github.com/glpi-project/glpi/releases/tag/9.4.1.1