CVE-2024-28241

HIGH

Glpi-project Glpi Agent < 1.7.2 - Improper Privilege Management

Title source: rule
STIX 2.1

Description

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and even gain higher privileges. Users should upgrade to GLPI-Agent 1.7.2 to receive a patch. As a workaround, use the default installation folder which involves installed folder is automatically secured by the system.

References (2)

Core 2

Scores

CVSS v3 7.3
EPSS 0.0004
EPSS Percentile 13.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (1)
glpi-project/glpi_agent < 1.7.2
Published Apr 25, 2024
Tracked Since Feb 18, 2026