CVE-2023-48710 - Vulnerability Details - OpenCVE

ReportizFlow

iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26
https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-04-15T17:47:51.113Z

Updated: 2024-08-02T21:37:54.644Z

Reserved: 2023-11-17T19:43:37.555Z

Link: CVE-2023-48710

Vulnrichment

Updated: 2024-08-02T21:37:54.644Z

NVD

Status : Awaiting Analysis

Published: 2024-04-15T18:15:09.070

Modified: 2024-11-21T08:32:18.550

Link: CVE-2023-48710

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-48710", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-11-17T19:43:37.555Z", "datePublished": "2024-04-15T17:47:51.113Z", "dateUpdated": "2024-08-02T21:37:54.644Z"}, "containers": {"cna": {"title": "iTop limit pages/exec.php script to PHP files", "problemTypes": [{"descriptions": [{"cweId": "CWE-552", "lang": "en", "description": "CWE-552: Files or Directories Accessible to External Parties", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc"}, {"name": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26", "tags": ["x_refsource_MISC"], "url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26"}], "affected": [{"vendor": "Combodo", "product": "iTop", "versions": [{"version": "< 2.7.10", "status": "affected"}, {"version": ">= 3.0.0, < 3.0.4", "status": "affected"}, {"version": ">= 3.1.0, < 3.1.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-04-15T17:47:51.113Z"}, "descriptions": [{"lang": "en", "value": "iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. \n The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0."}], "source": {"advisory": "GHSA-g652-q7cc-7hfc", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "combodo", "product": "itop", "cpes": ["cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2.7.10", "versionType": "custom"}, {"version": "3.0.0", "status": "affected", "lessThan": "3.0.4", "versionType": "custom"}, {"version": "3.1.0", "status": "affected", "lessThan": "3.1.1", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-26T19:03:48.293598Z", "id": "CVE-2023-48710", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-26T19:06:04.001Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T21:37:54.644Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc"}, {"name": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc", "name": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26", "name": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T21:37:54.644Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-48710", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-26T19:03:48.293598Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*"], "vendor": "combodo", "product": "itop", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.10", "versionType": "custom"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.4", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.1", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-26T19:05:54.451Z"}}], "cna": {"title": "iTop limit pages/exec.php script to PHP files", "source": {"advisory": "GHSA-g652-q7cc-7hfc", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Combodo", "product": "iTop", "versions": [{"status": "affected", "version": "< 2.7.10"}, {"status": "affected", "version": ">= 3.0.0, < 3.0.4"}, {"status": "affected", "version": ">= 3.1.0, < 3.1.1"}]}], "references": [{"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc", "name": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26", "name": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. \n The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-552", "description": "CWE-552: Files or Directories Accessible to External Parties"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-04-15T17:47:51.113Z"}}}, "cveMetadata": {"cveId": "CVE-2023-48710", "state": "PUBLISHED", "dateUpdated": "2024-08-02T21:37:54.644Z", "dateReserved": "2023-11-17T19:43:37.555Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-04-15T17:47:51.113Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. \n The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0."}, {"lang": "es", "value": "iTop es una plataforma de gesti\u00f3n de servicios de TI. Los archivos de la carpeta `env-production` se pueden recuperar aunque tengan acceso restringido. Con suerte, no hay archivos confidenciales almacenados en esa carpeta de forma nativa, pero podr\u00eda haberlos desde un m\u00f3dulo de terceros. El script `pages/exec.php` se ha corregido para limitar la ejecuci\u00f3n de archivos PHP \u00fanicamente. Otros tipos de archivos no se recuperar\u00e1n ni se expondr\u00e1n. La vulnerabilidad se solucion\u00f3 en 2.7.10, 3.0.4, 3.1.1 y 3.2.0."}], "id": "CVE-2023-48710", "lastModified": "2024-11-21T08:32:18.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}]}, "published": "2024-04-15T18:15:09.070", "references": [{"source": "[email protected]", "url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26"}, {"source": "[email protected]", "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-552"}], "source": "[email protected]", "type": "Secondary"}]}