Beveiligingsadvies

CVE-2020-4079

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-12 19:20:14

Laatst bijgewerkt 2024-08-04 07:52:20

Toegewezen door GitHub_M

CVSS-score 7.7

Status PUBLISHED

Beschrijving

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint for the "excel export" portal functionality is called directly it allows getting data without scope filtering. This allows a user to access data they which they should not have access to. This is fixed in versions 2.7.2 and 3.0.0.

← Alle CVE's bekijken Bekijk op cve.org ↗