CVE-2020-15219CWE-209

SQL query displayed on portal error

Medium · published January 13, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, when a download error is triggered in the user portal, an SQL query is displayed to the user. This is fixed in versions 2.7.2 and 3.0.0.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2021-01-13T16:55Z
EPSS history
Timeline
  • 13 JAN 16:55Z
    SQL query displayed on portal error
    cvelistv5