Itop Security Vulnerabilities and Issues — Itop CVE List

Lucene search

CombodoItop

2 matches found

CVE•added 2023/03/14 4:15 p.m.•44 views

CVE-2022-39214

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.

9.6CVSS7.6AI score0.02152EPSS

CVE•added 2023/03/14 4:15 p.m.•40 views

CVE-2022-39216

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.

9.8CVSS8.4AI score0.0023EPSS