Unrated severityNVD Advisory· Published Jul 21, 2021· Updated Aug 3, 2024
Any user can see any fields (including mailbox password) with GroupBy Dashlet
CVE-2021-32775
Description
Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, a non admin user can get access to many class/field values through GroupBy Dashlet error message. This issue is fixed in versions 2.7.4 and 3.0.0.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/Combodo/iTop/security/advisories/GHSA-xh7w-rrp3-fhpqmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.