CVE-2014-5032: GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to...

Security readout for executives and security teams

CVE-2014-5032 is an information disclosure issue in GLPI before 0.84.7. The application could expose cost information because access controls around cost-related search criteria were insufficient. For leaders, the main concern is confidentiality of financial or operational cost data, not evidence of system takeover from the supplied sources. Exposure is likely limited to organizations running GLPI versions earlier than 0.84.7, especially where the GLPI web interface is reachable by untrusted users. The supplied evidence does not identify affected distributions beyond linked Mandriva and Mageia advisories. Prioritize remediation where GLPI contains sensitive cost, asset, ticketing, or procurement data, or where the interface is exposed beyond a trusted internal audience. This is a confidentiality issue with incomplete severity data, so urgency should be based on data sensitivity and exposure. Mitigation focus: Upgrade GLPI to 0.84.7 or a later supported release.; Apply fixed vendor packages from the relevant Linux distribution advisory, where applicable.; Restrict GLPI access to trusted networks and authorized users until patched..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.