CVE-2022-34125
Published: 16 April 2023
Summary
CVE-2022-34125 is a medium-severity Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability in Glpi-Project Cmdb. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 9.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The vulnerability is a local file inclusion flaw in front/icon.send.php within the CMDB plugin for GLPI prior to version 3.0.3. By supplying a _log/ pathname in the file parameter, an attacker can read arbitrary files on the server, exposing sensitive information. The issue is tracked as CVE-2022-34125 with a CVSS 3.1 score of 6.5 and is associated with CWE-200 and CWE-203.
An authenticated user with low privileges can exploit the flaw over the network without user interaction to retrieve files outside the intended web root, such as configuration data or logs, resulting in high confidentiality impact while leaving integrity and availability unaffected.
The official GitHub security advisory GHSA-wv59-3rv4-vm9f and the 3.0.3 release notes recommend upgrading the CMDB plugin to version 3.0.3 or later to close the path traversal vector.
EPSS for the CVE rose from a low baseline to a peak of 0.0938 before settling at the current value of 0.0568, indicating that exploitation interest increased after public disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-37141
Vulnerability details
front/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive information via a _log/ pathname in the file parameter.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Concealment techniques directly prevent real sensitive data from being exposed to adversaries.
Restricts error message visibility to authorized recipients, directly reducing unauthorized exposure of sensitive information.
Automated marking applies security attributes to system outputs, making it harder for attackers to exploit unmarked sensitive information leading to unauthorized exposure.
Proper attribute retention and permitted-value enforcement limits unauthorized actors from accessing sensitive information lacking correct labels.
Prevents unauthorized exposure of sensitive information by prohibiting untrusted external systems from processing or storing it.
By enforcing authorization matching prior to sharing, the control reduces the risk of exposing sensitive information to unauthorized actors.
Review and removal of nonpublic information from publicly accessible systems directly prevents exposure of sensitive data to unauthorized actors.
Data mining protection mechanisms detect and block unauthorized bulk extraction of sensitive data, directly mitigating exposure to unauthorized actors.