Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-39190 EUVD-2021-25578

SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Published Sep 22, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.

Affected products

VendorProductAffectedFixed
pluginsGLPI sccm < 2.3.0 —

References