CVE-2022-39214
Authenticated users of Combodo iTop can take over any account
Résumé
Authenticated users of Combodo iTop can take over any account
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com