CVE-2024-32870

CVSS 3.1 Score 5.8 of 10 (medium)

Details

Published Nov 5, 2024

Updated: Nov 13, 2024

CWE ID 200

Summary

CVE-2024-32870 affects the popular IT Service Management tool, iTop. This vulnerability allows anyone with access to the iTop URI to obtain sensitive information about the server, operating system, database management system, PHP version, and iTop configuration. The issue has been addressed in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. It is strongly recommended that users upgrade as soon as possible. No known workarounds exist for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Combodo iTop

Affected Vendors

Combodo

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/vfosLE
https://www.cve.org/CVERecord?id=CVE-2024-32870
https://nvd.nist.gov/vuln/detail/CVE-2024-32870

Back to Vulnerability Database