CVE-2020-12777: Combodo iTop - Broken Access Control
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-12777?
CVE-2020-12777 is a vulnerability in Combodo iTop that allows unauthorized attackers to inject command and disclose system information.
What software versions are affected by CVE-2020-12777?
Combodo iTop versions up to and including 3.0.0 are affected by CVE-2020-12777.
What is the severity of CVE-2020-12777?
CVE-2020-12777 has a severity rating of 7.5 (high).
How can an attacker exploit CVE-2020-12777?
An attacker can exploit CVE-2020-12777 by injecting commands and gaining unauthorized access to system information.
Where can I find more information about CVE-2020-12777?
You can find more information about CVE-2020-12777 in the following references: [CVE-2020-12777 GitHub Advisory](https://github.com/Combodo/iTop/security/advisories/GHSA-88fq-r22m-64q2) and [CVE-2020-12777 TW-CERT Advisory](https://www.twcert.org.tw/tw/cp-132-3833-46ae7-1.html).