ByteOS Network

NVD Vulnerability Details :

CVE-2019-11215

Analyzed

Source-cve@mitre.org

Published At-14 Feb, 2020 | 18:15

Updated At-24 Aug, 2020 | 17:37

In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be accomplished by calling ajax.dataloader with a maliciously crafted payload. Many conditions can place the configuration file into a writable state: during installation; during upgrade; in certain cases, an error during modification of the file from the web interface leaves the file writable (can be triggered with XSS); a race condition can be triggered by the hub-connector module (community version only from 2.4.1 to 2.6.0); or editing the file in a CLI.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

combodo>>itop>>Versions from 2.2.0(inclusive) to 2.4.0(inclusive)

cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*

combodo>>itop>>Versions from 2.4.1(inclusive) to 2.6.0(inclusive)

cpe:2.3:a:combodo:itop:*:*:*:*:community:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-362	Primary	nvd@nist.gov
CWE-732	Primary	nvd@nist.gov
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://0day.love/itop_vulnerabilities_disclosure.pdf	cve@mitre.org	Broken Link
https://www.itophub.io/wiki/page?id=2_6_0:release:change_log	cve@mitre.org	Release Notes

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History