Rapid7 Vulnerability & Exploit Database

FreeBSD: VID-675E5098-3B15-11EB-AF2A-080027DBE4B7 (CVE-2020-15175): glpi -- Unauthenticated File Deletion

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

FreeBSD: VID-675E5098-3B15-11EB-AF2A-080027DBE4B7 (CVE-2020-15175): glpi -- Unauthenticated File Deletion

Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
06/25/2020
Created
12/14/2020
Added
12/12/2020
Modified
12/12/2020

Description

In GLPI before version 9.5.2, the `?pluginimage.send.php?` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the files and folders contained in “/files/”. Some of the sensitive information that is compromised are the user sessions, logs, and more. An attacker would be able to get the Administrators session token and use that to authenticate. The issue is patched in version 9.5.2.

Solution(s)

  • freebsd-upgrade-package-glpi

References

  • CVE-2020-15175

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;