RCE in Glpi-Project Glpi-Agent
CVE-2023-34254
The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. In the case, the agent is running with administration privileges, a malicious user could gain high privileges on the computer glpi-agent is running on. A malicious user could also disclose all remote accesses the agent is configured with for remoteinventory task. This vulnerability has been patched in glpi-agent 1.5.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Glpi-project Glpi-agent — versions < 1.5
- Glpi-project Glpi_agent
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2023-34254?
- CVE-2023-34254 is a high-severity vulnerability in Glpi-Project Glpi-Agent, classified under OS Command Injection. CVSS score: 7.6/10. Published 2023-06-23.
- How severe is CVE-2023-34254?
- High severity. CVSS v3 base score is 7.6 out of 10.