PT-2024-3095 · Itop+1 · Itop+1

Jm-Syn · Published 2024-01-04 · Updated 2025-02-06 · CVE-2023-38511

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions iTop versions prior to 3.0.4 iTop versions prior to 3.1.1

Description The issue is related to the dashboard editor of the iTop IT service management platform, which can load multiple files and URLs, and is vulnerable to full path disclosure on the dashboard config file. This can allow a remote attacker to disclose protected information due to incorrect restriction of access to a directory with limited access.

Recommendations For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue. For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the dashboard editor to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2024-1028

ALT-PU-2024-4537

ALT-PU-2024-4547

ALT-PU-2024-4961

BDU:2024-03294

CVE-2023-38511

GHSA-323R-CHX5-M9GM

Affected Products

Alt Linux

Itop

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38511.json · Exploit
• 🔥 https://synacktiv.com/advisories/file-read-in-itop · Exploit
• https://github.com/Combodo/iTop/commit/343e87a8d4fc8253fd81aeaf0dcc424b9dc4eda7 · Patch
• https://github.com/Combodo/iTop/commit/89145593ef2e077529a6f7ee7cde712db637e1ab · Patch
• https://github.com/Combodo/iTop/security/advisories/GHSA-323r-chx5-m9gm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38511 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38511 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03294 · Security Note
• https://t.me/cvenotify/76819 · Telegram Post
• https://t.me/cvenotify/76844 · Telegram Post
• https://t.me/cvenotify/110287 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1779942812638732734 · Twitter Post
• https://twitter.com/CVEnew/status/1779923653263491182 · Twitter Post