Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Combodo iTop's weak password reset token leads to account takeover
Vulnerability Description
Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
使用不充分的随机数
Vulnerability Title
Combodo iTop 安全特征问题漏洞
Vulnerability Description
Combodo iTop是法国Combodo公司的一套基于ITIL开发且用于IT环境日常运营的开源Web应用程序。该程序提供事件管理、配置管理和问题管理等功能。 Combodo iTop 2.7.8 之前和 3.0.2-1 之前版本存在安全特征问题漏洞，该漏洞源于重置密码令牌是在没有任何随机参数的情况下生成的，这可能会导致帐户接管问题。
CVSS Information
N/A
Vulnerability Type
N/A