CVE-2021-39190

MEDIUM 5.3CVE-2021-39190 · Published 22/09/2022 · updated 17/06/2026

In short

CVE-2021-39190 is a MEDIUM (CVSS 5.3) vulnerability affecting system center configuration manager (teclib-edition).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.4% of all vulnerabilities.
Fix: update to 2.3.0 or later.

Package	Affected versions	Patched versions
system center configuration manager teclib-edition	`< 2.3.0`	`2.3.0`

Description

The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.

References

pluginsGLPI/sccm commit 29a7f92 · Patch
pluginsGLPI/sccm security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free