CVE-2021-32775

2021-07-2121:15:07

Google

osv.dev

combodo itop

it service management

non admin user

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

28.4%

JSON

Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, a non admin user can get access to many class/field values through GroupBy Dashlet error message. This issue is fixed in versions 2.7.4 and 3.0.0.

References

github.com/Combodo/iTop/security/advisories/GHSA-xh7w-rrp3-fhpq