CVE-2020-15218CWE-613

Admin pages are cached and can be embedded

Medium · published January 13, 2021

CVSS v3.1
6.8
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, admin pages are cached, so that their content is visible after deconnection by using the browser back button. This is fixed in versions 2.7.2 and 3.0.0.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00774 · 55.3th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2021-01-13T16:50Z
EPSS history
Timeline
  • 13 JAN 16:50Z
    Admin pages are cached and can be embedded
    cvelistv5