Kubo-Security

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.7.12 iTop versions prior to 3.1.3 iTop versions prior to 3.2.1 Description: The issue allows anyone with an account having portal access to set values to object fields when they are not supposed to. Recommendations: For versions prior to 2.7.12, update to version 2.7.12 or later. For versions prior to 3.1.3, update to version 3.1.3 or later. For versions prior to 3.2.1, update to version 3.2.1 or later.

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.7.12 iTop versions 3.0.0 through 3.1.3 iTop versions 3.2.0 through 3.2.1 Description: iTop is a web-based IT Service Management tool. Server code execution is possible through the frontend of iTop's portal. This issue is related to improper neutralization of special elements used in an OS command, also known as OS Command Injection. Recommendations: For versions prior to 2.7.12, update to version 2.7.12 or later. For versions 3.0.0 through 3.1.3, update to version 3.1.3 or later. For versions 3.2.0 through 3.2.1, update to version 3.2.1 or later.