medium4.0
CVE-2015-7685
GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter t…
Impact
GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter to front/user.form.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glpi-Project | Glpi | through 0.85.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2015/Feb/71
- http://www.glpi-project.org/spip.php?page=annonce&id_breve=338
- https://forge.glpi-project.org/issues/5218
- http://seclists.org/fulldisclosure/2015/Feb/71
- http://www.glpi-project.org/spip.php?page=annonce&id_breve=338
- https://forge.glpi-project.org/issues/5218