CVE-2024-52001mediumCWE-200

CVE-2024-52001: fallo de gravedad media en Combodo iTop

Portal user is able to access forbidden services information in Combodo iTop

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear iTop

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.3epss 0.3%
Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Combodo · iTop
CVEs relacionadas — Combodo iTop

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-39214CRITICALAuthenticated users of Combodo iTop can take over any accountEPSS 25.6%CVE-2022-24780HIGHCode Injection in Combodo iTopEPSS 5.7%CVE-2021-32663HIGHUnauthorized setup leads to SSRF in Combodo/iTopEPSS 1.5%CVE-2020-12777HIGHCombodo iTop - Broken Access ControlEPSS 1.3%CVE-2024-51739HIGHUsers enumeration allowed through Rest API in Combodo iTopEPSS 1.2%CVE-2020-12780HIGHCombodo iTop - Security MisconfigurationEPSS 1.2%