CVE-2019-13967: High severity itop vulnerability
iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to launch a compile operation. The requests use the pages/exec.php?execenv=production&execmodule=itop-hub-connector&execpage=ajax.php&operation=compile URI. This only affects the community version.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13967?
CVE-2019-13967 has a severity rating that indicates it can lead to a denial of service, affecting application availability.
How do I fix CVE-2019-13967?
To fix CVE-2019-13967, it is recommended to upgrade iTop to a version higher than 2.6.0.
Who is affected by CVE-2019-13967?
CVE-2019-13967 affects users of iTop versions 2.2.0 through 2.6.0.
What attack vector is utilized in CVE-2019-13967?
CVE-2019-13967 can be exploited by remote attackers sending numerous requests to a specific URI that triggers a compile operation.
Is there a workaround for CVE-2019-13967?
Currently, there is no specific workaround for CVE-2019-13967 other than upgrading to a patched version.