6 matches found
CVE-2024-52001
Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability...
CVE-2024-52001 Portal user is able to access forbidden services information in Combodo iTop
Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability...
PT-2024-35088
Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.2.0 Description The issue allows portal users to access forbidden services information. This is a problem with the Combodo iTop tool, which is used for IT Service Management. There are no known workarounds for...
squid: improper input validation may allow a trusted client to perform HTTP request smuggling
A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this...
squid: improper input validation may allow a trusted client to perform HTTP request smuggling
A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this...
squid: improper input validation may allow a trusted client to perform HTTP request smuggling
A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this...