Vulnerabilities > CVE-2022-39214 - Unspecified vulnerability in Combodo Itop

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

combodo

NVD

Published: 2023-03-14

Updated: 2024-11-21

Summary

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.

Vulnerable Configurations

Part	Description	Count
Application	Combodo Combodo Itop 3.0.1 Combodo Itop 3.0.2 Combodo Itop 0.7.1 Combodo Itop 0.7.2 Combodo Itop 0.8 Combodo Itop 0.8.0 Combodo Itop 0.8.1.3 Combodo Itop 0.9 Combodo Itop 0.9.1 Combodo Itop 1.0 Combodo Itop 1.0.0 Combodo Itop 1.0.1 Combodo Itop 1.0.2 Combodo Itop 1.1 Combodo Itop 1.1.0 Combodo Itop 1.1.181 Combodo Itop 1.2 Combodo Itop 1.2.0 Combodo Itop 1.2.1 Combodo Itop 2.0 Combodo Itop 2.0.0 Combodo Itop 2.0.1 Combodo Itop 2.0.2 Combodo Itop 2.0.3 Combodo Itop 2.1.0 Combodo Itop 2.2.0 Combodo Itop 2.2.1 Combodo Itop 2.3.0 Combodo Itop 2.3.1 Combodo Itop 2.3.2 Combodo Itop 2.3.3 Combodo Itop 2.3.4 Combodo Itop 2.4.0 Combodo Itop 2.4.1 Combodo Itop 2.4.2 Combodo Itop 2.4.3 Combodo Itop 2.5.0 Combodo Itop 2.5.1 Combodo Itop 2.6.0 Combodo Itop 2.6.1 Combodo Itop 2.6.3 Combodo Itop 2.6.4 Combodo Itop 2.7 Combodo Itop 2.7.0 Combodo Itop 2.7.0-1 Combodo Itop 2.7.0-2 Combodo Itop 2.7.1 Combodo Itop 2.7.2 Combodo Itop 2.7.2-1 Combodo Itop 2.7.3 Combodo Itop 2.7.3-1 Combodo Itop 2.7.3-2 Combodo Itop 2.7.4 Combodo Itop 2.7.5 Combodo Itop 2.7.5-1 Combodo Itop 2.7.5-2 Combodo Itop 2.7.6 Combodo Itop 2.7.7	94

Summary

Vulnerable Configurations

References