Sploitus

CVE-2018-10642

No indexed exploits for CVE-2018-10642 yet

Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().

Affected products
Alt Linux, Itop
Combodo Itop
≤ 2.4.1
Fix
Available
CVSS 3.0
7.2 HIGH
EPSS
7.5% (94th percentile)
Weakness
CWE-94
NVD status
Modified
Published
2018-05-02
CVE-2018-10642 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2018-10642 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2018-10642 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.