CVE-2020-15220

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, two cookies are created for the same session, which leads to a possibility to steal user session. This is fixed in versions 2.7.2 and 3.0.0.
References
Configurations

Configuration 1

cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
cpe:2.3:a:combodo:itop:3.0.0:alpha:*:*:*:*:*:*

Information

Published : 2021-01-13 05:15

Updated : 2021-01-15 02:46


NVD link : CVE-2020-15220

Mitre link : CVE-2020-15220

Products Affected
No products.
CWE