CVE-2019-10231: Teclib-Edition Gestionnaire Libre De Parc Informatique

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).

Affected products

• Teclib-Edition Gestionnaire Libre De Parc Informatique: before 9.4.1.1 (fixed in 9.4.1.1)

Published 2019-03-27. Last modified 2026-06-17.