CVEvulnerability
CVE-2020-15218
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-613
Description
Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, admin pages are cached, so that their content is visible after deconnection by using the browser back button. This is fixed in versions 2.7.2 and 3.0.0.
Affected configurations
• combodo itop (< 2.7.2)
• combodo itop 3.0.0
Related
Weakness · not in database (1)
References
- https://github.com/Combodo/iTop/security/advisories/GHSA-3m3g-86hp-5p2j Third Party Advisory
- https://github.com/Combodo/iTop/security/advisories/GHSA-3m3g-86hp-5p2j Third Party Advisory