CVE-2022-39216
Combodo iTop's weak password reset token leads to account takeover
Résumé
Combodo iTop's weak password reset token leads to account takeover
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com