CyberRota Analysis
AI-GeneratedImproper access control in Combodo iTop versions prior to 3.2.3 allows unauthorized users to access documents through the ajax.render.php and ajax.document.php files without proper permission checks. This vulnerability could lead to sensitive information exposure, making it critical for organizations using iTop for IT service management to prioritize upgrading to version 3.2.3 or later to mitigate potential risks. Users of affected versions should assess their deployment for potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, improper access control in ajax.render.php and ajax.document.php allows for document access without checking on user permissions. This issue has been fixed in version 3.2.3.