GLPI Escalade Plugin Improper Access Control Vulnerability

Vulnerability

A moderate improper access control vulnerability has been identified in the GLPI Escalade plugin, prior to version 2.9.11. This vulnerability can lead to unauthorized data exposure and disrupt normal workflow processes for GLPI users.

Impact

Exploitation of this vulnerability could result in unauthorized data access and interference with standard workflow operations within GLPI.

Remediation

Users are advised to upgrade to version 2.9.11. If an immediate upgrade is not possible, the plugin can be disabled as a temporary workaround.

Added: Jul 1, 2025, 8:57 PM
Updated: Jul 1, 2025, 8:57 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
3.1
exploitability
7.4
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.