CVE-2026-34949

6.5 Moyenne

Publiée le 22/08/2026 à 01:16 · Modifiée le 12/10/2026 à 18:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions. This issue has been fixed in version 3.2.3.

Traduire en français

Produits concernés

Combodo iTop

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L`

Faiblesses (CWE)

CWE-306

Références

https://github.com/Combodo/iTop/security/advisories/GHSA-2xh3-r27f-3pr5

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories