CyberRota Analysis
AI-GeneratedUnauthenticated users can exploit a vulnerability in Combodo iTop versions prior to 3.2.3 to delete the .readonly file, potentially leading to unauthorized code execution. This critical flaw poses a significant risk to any organization using affected versions of the IT service management tool. All users of iTop should prioritize upgrading to version 3.2.3 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in version 3.2.3.