CVE-2011-2720

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.

La funcionalidad de autocompletado en GLPI en versiones anteriores a la 0.80.2 no excluye campos determinados de nombres de usuario y contraseñas, lo que permite a atacantes remotos obtener información confidencial a través de determinadas peticiones POST.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-07-11 CVE Reserved
2011-08-05 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (21)

URL	Tag	Source
http://secunia.com/advisories/45542	Third Party Advisory
http://www.glpi-project.org/spip.php?page=annonce&id_breve=237&lang=en	X_refsource_confirm
http://www.securityfocus.com/bid/48884	Vdb Entry
https://forge.indepnet.net/issues/3017	X_refsource_confirm
https://forge.indepnet.net/projects/glpi/versions/605	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC
http://www.openwall.com/lists/oss-security/2011/07/25/7	2012-02-16
http://www.openwall.com/lists/oss-security/2011/07/26/11	2012-02-16
https://bugzilla.redhat.com/show_bug.cgi?id=726185	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14951	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14952	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14954	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14955	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14956	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14957	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14958	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14960	2012-02-16
https://forge.indepnet.net/projects/glpi/repository/revisions/14966	2012-02-16

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063408.html	2012-02-16
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063679.html	2012-02-16
http://secunia.com/advisories/45366	2012-02-16
http://www.mandriva.com/security/advisories?name=MDVSA-2012:014	2012-02-16

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				<= 0.80.1 Search vendor "Glpi-project" for product "Glpi" and version " <= 0.80.1"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6"		rc3		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.42 Search vendor "Glpi-project" for product "Glpi" and version "0.42"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.51 Search vendor "Glpi-project" for product "Glpi" and version "0.51"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.51a Search vendor "Glpi-project" for product "Glpi" and version "0.51a"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68"		rc3		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68.1 Search vendor "Glpi-project" for product "Glpi" and version "0.68.1"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68.2 Search vendor "Glpi-project" for product "Glpi" and version "0.68.2"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.68.3 Search vendor "Glpi-project" for product "Glpi" and version "0.68.3"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70"		rc3		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.70.1 Search vendor "Glpi-project" for product "Glpi" and version "0.70.1"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.70.2 Search vendor "Glpi-project" for product "Glpi" and version "0.70.2"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71 Search vendor "Glpi-project" for product "Glpi" and version "0.71"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1"		rc3		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.2 Search vendor "Glpi-project" for product "Glpi" and version "0.71.2"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.3 Search vendor "Glpi-project" for product "Glpi" and version "0.71.3"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.4 Search vendor "Glpi-project" for product "Glpi" and version "0.71.4"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.5 Search vendor "Glpi-project" for product "Glpi" and version "0.71.5"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.71.6 Search vendor "Glpi-project" for product "Glpi" and version "0.71.6"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72"		rc1		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72"		rc2		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72"		rc3		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72.1 Search vendor "Glpi-project" for product "Glpi" and version "0.72.1"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72.2 Search vendor "Glpi-project" for product "Glpi" and version "0.72.2"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72.3 Search vendor "Glpi-project" for product "Glpi" and version "0.72.3"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.72.4 Search vendor "Glpi-project" for product "Glpi" and version "0.72.4"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.78 Search vendor "Glpi-project" for product "Glpi" and version "0.78"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.78.1 Search vendor "Glpi-project" for product "Glpi" and version "0.78.1"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.78.2 Search vendor "Glpi-project" for product "Glpi" and version "0.78.2"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.78.3 Search vendor "Glpi-project" for product "Glpi" and version "0.78.3"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.78.4 Search vendor "Glpi-project" for product "Glpi" and version "0.78.4"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.78.5 Search vendor "Glpi-project" for product "Glpi" and version "0.78.5"		-		Affected
Glpi-project Search vendor "Glpi-project"		Glpi Search vendor "Glpi-project" for product "Glpi"				0.80 Search vendor "Glpi-project" for product "Glpi" and version "0.80"		-		Affected