CyberRota Analysis
AI-GeneratedUnauthenticated users can exploit a vulnerability in Combodo iTop prior to version 3.2.3 to delete the .readonly file, which is crucial for preventing unauthorized write actions on the platform. This could lead to unauthorized modifications or data loss within the IT service management tool. Organizations using affected versions should prioritize upgrading to 3.2.3 to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions. This issue has been fixed in version 3.2.3.