CVE-2019-13240

An issue was discovered in GLPI before 9.4.1

published July 10, 2019

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01747 · 77.6th percentile
Published
2019-07-10T13:48Z
EPSS history
Timeline
  • 10 JUL 13:48Z
    An issue was discovered in GLPI before 9.4.1
    cvelistv5