Teclib GLPI prior to 9.4.1.1 is affected by a timing attack associated with a cookie.
glpi-project glpi