PT-2021-9739 · Comodo+1 · Itop+1

Antoine Vacher + 1 · Published 2021-01-13 · Updated 2024-04-04 · CVE-2020-15219

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.2 Combodo iTop versions prior to 3.0.0

Description The issue concerns a web-based IT Service Management tool. When a download error occurs in the user portal, an SQL query is displayed to the user.

Recommendations For versions prior to 2.7.2, update to version 2.7.2 or later. For versions prior to 3.0.0, update to version 3.0.0 or later.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

ALT-PU-2023-1879

ALT-PU-2024-4537

ALT-PU-2024-4547

ALT-PU-2024-4961

CVE-2020-15219

GHSA-Q5CF-46RG-FRF8

Affected Products

Alt Linux

Itop

References · 3

• https://osv.dev/vulnerability/CVE-2020-15219 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15219 · Security Note
• https://github.com/Combodo/iTop/security/advisories/GHSA-q5cf-46rg-frf8 · Note