CVE-2022-24867

Name of the Vulnerable Software and Affected Versions GLPI (affected versions not specified)

Description The issue is related to an error in the configuration transfer to javascript in the GLPI system, where some entries are filtered out, but the ldap pass variable is not. This allows a remote attacker to gain unauthorized access to the root dn password. GLPI is a free asset and IT management software package that provides ITIL Service Desk features, licenses tracking, and software auditing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.