CVE-2024-51993

creationtimestamp| type| source ---|---|--- 2024-11-07 18:08:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113443005858730142 2024-11-07 20:16:50+00:00| seen| https://t.me/cvedetector/10107...

CVE-2024-51993

CVE-2024-51993 affects Combodo iTop (pre-3.2.0) where passwords for misconfigured users are stored in cleartext and can be read if an attacker gains access to backups or the database. The issue is mitigated by upgrading to version 3.2.0 or later. If upgrading is not possible, encryption of backup...

CVE-2024-51993 Password is stored in clear in the database in Combodo iTop

Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read some passwords for misconfigured Users. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. Users unable to upgrade are advised to encrypt their...