CVE-2019-10231

Name of the Vulnerable Software and Affected Versions: Teclib GLPI versions prior to 9.4.1.1

Description: The issue allows bypass of authentication due to a PHP type juggling vulnerability. This occurs in the checkPassword() function, which is located in the auth.class.php file.

Recommendations: For versions prior to 9.4.1.1, update to version 9.4.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Auth::checkPassword() function until a patch is available.