CVE-2024-51740

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 5, 2024
Updated: Nov 8, 2024
CWE ID 918

Summary

CVE-2024-51740: A vulnerability affects Comodo iTop, an IT Service Management tool. It allows a low-privileged user to create HTTP requests on behalf of the server. This issue lies in the user portal form manager, which previously instantiated classes indiscriminately. The vulnerability is addressed in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are strongly urged to upgrade without delay, as there are no known workarounds for this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share