Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-39214
HistoryMar 14, 2023 - 4:15 p.m.

Command injection

2023-03-1416:15:00
PRIOn knowledge base
www.prio-n.com
9
itop
command injection
account takeover
security vulnerability
fix
web-based platform

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account’s username. This issue is fixed in versions 2.7.8 and 3.0.2-1.

CPENameOperatorVersion
itopgt3.0.0
itoplt3.0.2
itoplt2.7.8

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

Related for PRION:CVE-2022-39214