CVE-2024-51739

Summary

CVE-2024-51739 affects Comodo iTop, a popular IT Service Management tool. The vulnerability allows unauthenticated users to perform user enumeration, increasing the risk of brute-force attacks. By checking if a reset password attempt is successful, the tool inadvertently reveals whether a user exists or not. To mitigate this issue, versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0 now display a generic message instead. It is strongly recommended that users upgrade as soon as possible. Users who cannot upgrade right away can mitigate the risk by overloading the relevant dictionary entry through an extension.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.