This version specifically fixes 2 critical security issues related to MSI packaging on Windows:
CVE-2024-28240: A local user could modify the GLPI Agent configuration to gain higher privileges.
CVE-2024-28241: A local user could modify the GLPI Agent installation to gain higher privileges, but only when GLPI Agent is not installed in the default installation folder.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the links listed below in the References section.
Solution
These security issues only impact Windows installation performed with MSI packaging, so we urge you to upgrade all your agents as soon as possible if this is your case.
Important: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the kibana package is now available for NetEye 4. Security Fix for NetEye 4.41 8.18.3_neteye3.79.1-1 CVSSv3.1: 9.9 Read More
Blog auf DEUTSCH. Una versione ITALIANA seguirà fra poco! [Disclaimer: this blog is deliberatively written in German, an Italian version will follow. WürthPhoenix is Gold partner for GLPI for Italy and for the German Market (Germany, Austria, Switzerland, South Tyrol), Read More
Important: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the kibana package is now available for NetEye 4. Security Fix for NetEye 4.41 8.17.6_neteye3.74.6-1 CVSSv3.1: 9.1(Critical) Read More
Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a security impact of High Topic An update for the package grafana is now available for NetEye 4. Security Fix for NetEye 4.41 11.6.1_neteye3.27.1-1 For details on how Read More
Important: Chromium security update Type/Severity NetEye Product Security has rated this update as having a security impact of Low Security Fix for NetEye 4.41 An update for the following packages is now available for NetEye 4: chromium to version 133.0.6943.141-1 Read More
