critical9.8
CVE-2019-10231
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.
Impact
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teclib-Edition | Gestionnaire Libre De Parc Informatique | before 9.4.1.1 |