CVE-2020-11033

In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All api_tokens which can be used to do privileges escalations or read/update/delete data normally non accessible to the current user. - All personal_tokens can display another users planning. Exploiting this vulnerability requires the api to be enabled, a technician account. It can be mitigated by adding an application token. This is fixed in version 9.4.6.

• CWE-200
• CWE-200

• https://github.com/glpi-project/glpi/security/advisories/GHSA-rf54-3r4w-4h55Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/
• https://github.com/glpi-project/glpi/security/advisories/GHSA-rf54-3r4w-4h55Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/

Published

May 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11028In affected versions of WordPress, some private posts, which…7.5
• CVE-2020-11029In affected versions of WordPress, a vulnerability in the st…6.1
• CVE-2020-1103An information disclosure vulnerability exists where certain…6.5
• CVE-2020-11030In affected versions of WordPress, a special payload can be …5.4
• CVE-2020-11031In GLPI before version 9.5.0, the encryption algorithm used …7.5
• CVE-2020-11032In GLPI before version 9.4.6, there is a SQL injection vulne…7.2
• CVE-2020-11034In GLPI before version 9.4.6, there is a vulnerability that …6.1
• CVE-2020-11035In GLPI after version 0.83.3 and before version 9.4.6, the C…9.3
• CVE-2020-11036In GLPI before version 9.4.6 there are multiple related stor…5.4
• CVE-2020-11037In Wagtail before versions 2.7.3 and 2.8.2, a potential timi…4.7
• CVE-2020-11038In FreeRDP less than or equal to 2.0.0, an Integer Overflow …5.4
• CVE-2020-11039In FreeRDP less than or equal to 2.0.0, when using a manipul…6.8