CVE-2018-10642

Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform…

published May 2, 2018

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07381 · 94.4th percentile
Published
2018-05-02T07:00Z
EPSS history
Timeline
  • 02 MAY 07:00Z
    Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform…
    cvelistv5