glpi -- Improve encryption algorithmentered 2020-03-30
no CVE referenced
CVE details
CVE-2020-11031
In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The library chosen is sodium.
- Score
- 7.8 high
- Published
- 2020-09-23
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.