GLPI Inventory Plugin Improper Access Control Vulnerability

A vulnerability allowing improper access control has been identified in the GLPI Inventory Plugin, affecting versions prior to 1.5.0. This vulnerability could potentially be exploited to manipulate access controls within the plugin's functionality.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of resources within the GLPI Inventory Plugin, allowing users to bypass intended access controls.

Reproduction

To reproduce this vulnerability, install a version of the GLPI Inventory Plugin prior to 1.5.0. Then, upload a file through the plugin's deployment package feature. The uploaded file will be accessible via the GLPI Inventory Upload directory, which can be exploited to bypass access controls.

Remediation

Users are advised to upgrade to GLPI Inventory Plugin version 1.5.0 or later, where this vulnerability has been patched.