CyberRota Analysis
AI-GeneratedCombodo iTop versions prior to 3.2.3 are vulnerable to unauthorized information disclosure, allowing users to access sensitive object data through search operations. This high-severity flaw poses a significant risk to organizations using the affected versions, particularly those managing sensitive IT service data. It is crucial for all users of iTop to prioritize upgrading to version 3.2.3 or later to mitigate this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3.