CyberRota Analysis
AI-GeneratedThe vulnerability in Combodo iTop allows for user enumeration through inconsistent responses in the password reset mechanism prior to version 3.2.3, potentially enabling attackers to identify valid usernames. Organizations using versions prior to 3.2.3 should prioritize updating to mitigate the risk of unauthorized access and enhance their security posture.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3.