CyberRota Analysis
AI-GeneratedUnauthenticated users can exploit a vulnerability in Combodo iTop prior to version 3.2.3 to access sensitive files through sniffed URLs. This poses a significant risk to organizations using this IT service management tool, as it could lead to unauthorized data exposure. IT administrators and security teams should prioritize updating to version 3.2.3 to mitigate this high-severity issue.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.