CVE-2020-15220

Published January 13th, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, two cookies are created for the same session, which leads to a possibility to steal user session. This is fixed in versions 2.7.2 and 3.0.0.

Combodo/iTop

A simple, web based CMDB & IT Service Management tool

GitHub

1.13K