iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to launch a compile operation. The requests use the pages/exec.php?exec_env=production&exec_module=itop-hub-connector&exec_page=ajax.php&operation=compile URI. This only affects the community version.
References
Link | Resource |
---|---|
https://0day.love/itop_vulnerabilities_disclosure.pdf | Broken Link |
https://www.itophub.io/wiki/page?id=latest%3Arelease%3Achange_log | Release Notes |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-02-14T21:03:45
Updated: 2020-02-14T21:03:45
Reserved: 2019-07-18T00:00:00
Link: CVE-2019-13967
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-02-14T22:15:10.283
Modified: 2020-08-24T17:37:01.140
Link: CVE-2019-13967
JSON object: View
Redhat Information
No data.
CWE