A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "2.7.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-alpha"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta2"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta3"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta4"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta5"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta6"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta7"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-beta8"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.0-rc"
}
]
}