Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-39214

Published: 14/03/2023 Updated: 18/03/2023
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 0
Subscribe to Itop

Vulnerability Summary

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.

Vulnerable Product Search on Vulmon Subscribe to Product

combodo itop

References

CWE-863https://github.com/Combodo/iTop/commit/bdebea62b642622ed71410b26c81e8537e6e58fahttps://github.com/Combodo/iTop/security/advisories/GHSA-vj96-j84g-jhx4https://github.com/Combodo/iTop/commit/4c1df9927d1dc6b0181ee20721f93346def026fdhttps://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook