CVE-2024-51995CWE-284

Logic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTop

High · published November 7, 2024

CVSS v3.0
7.1
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

Combodo iTop is a web based IT Service Management tool. An attacker can request any `route` we want as long as we specify an `operation` that is allowed. This issue has been addressed in version 3.2.0 by applying the same access control pattern as in `UI.php` to the `ajax.render.php` page which does not allow arbitrary `routes` to be dispatched. All users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00426 · 35.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-11-07T17:55Z
EPSS history
Timeline
  • 07 NOV 17:55Z
    Logic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTop
    cvelistv5