CVE-2015-7685 | BDVDB-2026-72007 Detail

Description#

GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter to front/user.form.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://forge.glpi-project.org/issues/5218
http://seclists.org/fulldisclosure/2015/Feb/71
http://www.glpi-project.org/spip.php?page=annonce&id_breve=338

Exploit#

No public exploit known

History#

Version 12015-10-05Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.