CVE-2024-52002 |
BDSA-2024-8443 |
High |
Nov 08, 2024 |
Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability.
more...
Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
less...
|
3.1.2, 2.7.11, 3.0.4, 2.7.10, 2.7.9, 3.1.0, 3.0.3, 2.7.8, 3.0.2, 2.7.7
|
CVE-2024-52001 |
BDSA-2024-8448 |
Medium |
Nov 08, 2024 |
Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. Th
more...
Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
less...
|
3.1.2, 2.7.11, 3.0.4, 2.7.10, 2.7.9, 3.1.0, 3.0.3, 2.7.8, 3.0.2, 2.7.7
|
CVE-2024-52000 |
BDSA-2024-8439 |
Medium |
Nov 08, 2024 |
Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site Scripting (XSS) exploit by way
more...
Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site Scripting (XSS) exploit by way of editing a request's payload which can lead to malicious javascript execution. This issue has been addressed in version 3.2.0 via systematic escaping of error messages when rendering on the page. All users are advised to upgrade. There are no known workarounds for this vulnerability.
less...
|
3.1.2, 2.7.11, 3.0.4, 2.7.10, 2.7.9, 3.1.0, 3.0.3, 2.7.8, 3.0.2, 2.7.7
|
BDSA-2024-8493 |
|
Low |
Nov 12, 2024 |
Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read some passwords for misconfigured U
more...
Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read some passwords for misconfigured Users. Users unable to upgrade are advised to encrypt their backups independently of the iTop application.
**Note: CVE details have been utilized in generating this advisory. The details of the vulnerability have not been independently verified by Black Duck CyRC.**
less...
|
|