CVE-2019-14666

GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature

published September 25, 2019

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02234 · 82.6th percentile
Published
2019-09-25T19:19Z
EPSS history
Timeline
  • 25 SEP 19:19Z
    GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature
    cvelistv5