CVE-2023-34254
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-34254 is a vulnerability affecting the GLPI Agent prior to version 1.5. If an administrator user on a remote Unix system interacts with the agent during a remoteinventory task using SSH commands, they can inject harmful commands. Since the agent may run with administrative privileges, a successful attack could grant the malicious user high-level access to the targeted computer, potentially resulting in serious data breaches or system compromises. Additionally, the attacker could disclose all remote accesses configured for the remoteinventory task, posing a significant security risk. This vulnerability has been addressed in the latest GLPI Agent release, version 1.5.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions