Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-52001 EUVD-2024-45810

Portal user is able to access forbidden services information in Combodo iTop

Published Nov 8, 2024 · Updated Nov 12, 2024 · Assigned by GitHub_M

Description

Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

VendorProductAffectedFixed
Combodo iTop < 3.2.0 —

References