CVE-2020-11031

In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The library chosen is sodium.

• CWE-327

• https://github.com/glpi-project/glpi/commit/f1ae6c8481e5c19a6f1801a5548cada45702e01a#diff-b5d0ee8c97c7abd7e3fa29b9a27d1780Patch, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-7xwm-4vjr-jvqhThird Party Advisory
• https://github.com/glpi-project/glpi/commit/f1ae6c8481e5c19a6f1801a5548cada45702e01a#diff-b5d0ee8c97c7abd7e3fa29b9a27d1780Patch, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-7xwm-4vjr-jvqhThird Party Advisory

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11026In affected versions of WordPress, files with a specially cr…5.4
• CVE-2020-11027In affected versions of WordPress, a password reset link ema…8.1
• CVE-2020-11028In affected versions of WordPress, some private posts, which…7.5
• CVE-2020-11029In affected versions of WordPress, a vulnerability in the st…6.1
• CVE-2020-1103An information disclosure vulnerability exists where certain…6.5
• CVE-2020-11030In affected versions of WordPress, a special payload can be …5.4
• CVE-2020-11032In GLPI before version 9.4.6, there is a SQL injection vulne…7.2
• CVE-2020-11033In GLPI from version 9.1 and before version 9.4.6, any API u…7.2
• CVE-2020-11034In GLPI before version 9.4.6, there is a vulnerability that …6.1
• CVE-2020-11035In GLPI after version 0.83.3 and before version 9.4.6, the C…9.3
• CVE-2020-11036In GLPI before version 9.4.6 there are multiple related stor…5.4
• CVE-2020-11037In Wagtail before versions 2.7.3 and 2.8.2, a potential timi…4.7