CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-52001

Medium Severity
Combodo
SVRS
30/100

CVSSv3
4.3/10

EPSS
0.00044/1

CVE-2024-52001 allows unauthorized access to sensitive IT services information within Combodo iTop. This information disclosure vulnerability impacts users of the iTop IT Service Management tool. The SVRS score of 30 suggests a low level of active threat, but upgrading is still recommended.

The vulnerability enables portal users to bypass access controls and view services information they shouldn't have access to. While the CVSS score is relatively low (4.3), the presence of the "In The Wild" tag indicates potential active exploitation. The fix is available in iTop version 3.2.0, and users are advised to upgrade to prevent potential data breaches. Although the SVRS suggests the risk isn't critical, proactive patching remains the best course of action to ensure data security and compliance.

In The Wild
CVSS:3.1
AV:N
AC:L
PR:L
UI:N
S:U
C:L
I:N
A:N
2024-11-08

2025-01-07

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-52001 | Combodo iTop up to 3.1.x information disclosure (GHSA-9p26-v3wj-6q34)
vuldb.com2024-11-09
CVE-2024-52001 | Combodo iTop up to 3.1.x information disclosure (GHSA-9p26-v3wj-6q34) | A vulnerability classified as problematic was found in Combodo iTop up to 3.1.x. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability was named CVE-2024-52001. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com
rss
forum
news

Social Media

CVE-2024-52001 Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has be… https://t.co/uR0ghEcyfl
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
AppCombodoitop

References

ReferenceLink
[email protected]https://github.com/Combodo/iTop/security/advisories/GHSA-9p26-v3wj-6q34

CWE Details

CWE IDCWE NameDescription
CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence