CyberRota Analysis
AI-GeneratedThe vulnerability in Combodo iTop allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on new instances prior to version 3.2.3. This authentication bypass poses a significant risk, potentially leading to unauthorized access and manipulation of sensitive data. Organizations using affected versions of iTop should prioritize upgrading to version 3.2.3 to mitigate this critical security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3.