CVE-2024-51739
published 2024-11-05CVE-2024-51739: Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a…
PriorityP337medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EXPLOIT
EPSS
1.26%
65.9th percentile
Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displayed after resetting password no longer shows if the user exists or not. This fix is included in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. Users unable to upgrade may overload the dictionary entry `"UI:ResetPwd-Error-WrongLogin"` through an extension and replace it with a generic message.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| combodo | itop | < 2.7.11 | 2.7.11 |
| combodo | itop | — | — |
| combodo | itop | — | — |
| combodo | itop | >= 3.0.0 < 3.0.5 | 3.0.5 |
| combodo | itop | >= 3.1.0 < 3.1.2 | 3.1.2 |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
Nuclei
iTop - User Enumeration via REST Endpoint
nuclei·CVSS 5.3
CVE-2024-51739 [MEDIUM] iTop - User Enumeration via REST Endpoint
iTop - User Enumeration via REST Endpoint
From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is `do_reset_pwd`, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided.
Template:
id: CVE-2024-51739
info:
name: iTop - User Enumeration via REST Endpoint
author: DhiyaneshDk
severity: medium
description: |
From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is `do_reset_pwd`, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided.
impact: |
Attackers can exploit this vulnerability to compromise system security.
remediation: |
Appl
No writeups or analysis indexed.
2024-11-05
Published