Description (CNA)
Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, two cookies are created for the same session, which leads to a possibility to steal user session. This is fixed in versions 2.7.2 and 3.0.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Combodo / iTop | affected < 2.7.2 |
CWE
CWE-613
References
ADP enrichment
No English description supplied.