PT-2023-13712 · Comodo+1 · Itop+1

Blaklis + 1 · Publicado 2023-03-14 · Atualizado 2024-04-04 · CVE-2022-39214

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.8 Combodo iTop versions prior to 3.0.2-1

Description The issue allows a user who can log in to take over any account by knowing the account's username.

Recommendations For versions prior to 2.7.8, update to version 2.7.8 or later. For versions prior to 3.0.2-1, update to version 3.0.2-1 or later.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

ALT-PU-2023-1879

ALT-PU-2024-4537

ALT-PU-2024-4547

ALT-PU-2024-4961

CVE-2022-39214

GHSA-VJ96-J84G-JHX4

Produtos afetados

Alt Linux

Itop

Referências · 82

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24780.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24811.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46734.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24894.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39214.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39261.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39216.json · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2022-24894.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/firebase/php-jwt/CVE-2021-46743.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2022-39261.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2023-46734.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2022-24894.yaml · Exploit
• 🔥 https://github.com/Nyamort/CVE-2024-50340 · Exploit
• 🔥 https://github.com/Acceis/exploit-CVE-2022-24780 · Exploit
• 🔥 https://github.com/davwwwx/CVE-2022-23614 · Exploit