CyberRota Analysis
AI-GeneratedCombodo iTop, a web-based IT service management tool, contains a vulnerability that allows unauthorized users to lock objects without having the necessary write permissions. This could lead to disruptions in service management processes and hinder legitimate users' access to critical resources. Organizations using versions prior to 3.2.3 should prioritize upgrading to mitigate potential operational impacts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has been fixed in version 3.2.3.