Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2020-15220

Session fixation

Description

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, two cookies are created for the same session, which leads to a possibility to steal user session. This is fixed in versions 2.7.2 and 3.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Combodo iTop

  • < 2.7.2affected

References