CVE-2023-45808

Summary

CVE-2023-45808 affects the iTop IT service management platform, allowing users to create or update objects with extkey values that are not checked against their current user silo. This vulnerability enables an attacker to manipulate objects, such as UserRequests, outside of their intended scope. The issue has been resolved in iTop versions 2.7.10, 3.0.4, 3.1.1, and 3.2.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.