CVE-2020-12777 – Combodo iTop - Broken Access Control

https://notcve.org/view.php?id=CVE-2020-12777

10 Aug 2020 — A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information. Una función en Combodo iTop contiene una vulnerabilidad de Control de Acceso Roto, que permite a un atacante no autorizado inyectar comandos y revelar información del sistema • https://github.com/Combodo/iTop/security/advisories/GHSA-88fq-r22m-64q2 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •