CVE-2024-52001

Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-200

• https://github.com/Combodo/iTop/security/advisories/GHSA-9p26-v3wj-6q34Vendor Advisory

Published

Nov 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-51996Symphony process is a module for the Symphony PHP framework …7.5
• CVE-2024-51997Trustee is a set of tools and components for attesting confi…8.1
• CVE-2024-51998changedetection.io is a free open source web page change det…8.6
• CVE-2024-51999Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-5200The Postie WordPress plugin before 1.9.71 does not sanitise …4.8
• CVE-2024-52000Combodo iTop is a simple, web based IT Service Management to…6.1
• CVE-2024-52002Combodo iTop is a simple, web based IT Service Management to…8.8
• CVE-2024-52003Traefik (pronounced traffic) is an HTTP reverse proxy and lo…6.1
• CVE-2024-52004MediaCMS is an open source video and media CMS, written in P…8.7
• CVE-2024-52005Git is a source code management tool. When cloning from a se…8.8
• CVE-2024-52006Git is a fast, scalable, distributed revision control system…7.5
• CVE-2024-52007HAPI FHIR is a complete implementation of the HL7 FHIR stand…8.6