PT-2024-35088

CVE-2024-52001

Published

2024-11-08

Updated

2025-03-14

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.2.0

Description The issue allows portal users to access forbidden services information. This is a problem with the Combodo iTop tool, which is used for IT Service Management. There are no known workarounds for this issue.

Recommendations For versions prior to 3.2.0, upgrade to version 3.2.0 to resolve the issue. As a temporary workaround, consider restricting access to sensitive service information until the upgrade is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers

CVE-2024-52001

GHSA-9P26-V3WJ-6Q34