Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-39190

SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pluginsGLPI sccm

  • < 2.3.0affected

References