go to Content

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center



Combodo iTop - Broken Access Control

TVN ID TVN-202004004
Public Date 2020-08-10
Affected Products Combodo iTop versions prior to 2.7.0-beta2
Description A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information.
CVE ID CVE-2020-12777
Solution Update to version 2.7.1
Credit 黃榆翔、蔡仲南、Tseng, Yung-Hao