CVE Scan
Find out if your GLPI has known vulnerabilities and how to fix them
CVE Scan cross-references the installed GLPI version with the vulnerabilities published by the GLPI project itself (GitHub Security Advisories) and by the NVD, from NIST. For each CVE it shows the severity, whether it affects your version and which GLPI version fixes the flaw. The comparison respects the version line (10.0 or 11.0), so those who have already updated get no false alarm.
FreeGLPI 10, 11 and 12
Features
The same scan reviews the configuration of the server running GLPI with 19 checks: default passwords of the installation accounts, installer reachable from the web, debug mode, HTTPS and HSTS, clickjacking protection, Content-Security-Policy, session cookie, permissions of the configuration files and end of PHP security support. Each failed item comes with the suggested fix.
The result becomes a security score from 0 to 100 on the module Dashboard, with filters by status and severity, and every scan is kept in the history. The CVE database is updated every day by an automatic task and, without internet access, the module uses a built-in list with the critical and high flaws. Completely free.
How it works
Step 1
Install and run the scan
Enable the module and click "Run scan" on the Dashboard. The CVE database is downloaded by the daily automatic task or by the "Update database" button.
Step 2
The module matches the version and checks the server
CVE Scan compares the installed GLPI version with the CVE database and reviews the server configuration: PHP, HTTP headers, session cookie, accounts and file permissions.
Step 3
See the score and what to fix
The Dashboard shows the score and the indicators. Filter by status and severity and see, for each CVE, the version that fixes it and the advisory links on GitHub and the NVD.
Step 4
Fix and confirm
Apply the suggested fix, update GLPI when needed and run the scan again to confirm. The history shows how the score evolves with each scan.
See it in action
A quick tour of what the plugin does in practice.
Video demo coming soon.
Image gallery
1 / 1
What customers say
Excelente descubrimiento, logré subir mi score de 71 a 94 con las sugerencias del plugin. Muy buena herramienta, recomendada.
Testimonial in its original language
Start using CVE Scan
View available plans or read the full article about this module.