S4E just found a low-severity finding from missing http security headers implementation scanner

CVE

CVE-2024-32870

5.8

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be read by anyone having access to iTop URI. This issue has been patched in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

itop

Updated Sep 28, 2026View on NVD →

S4E scanner

mediumMisconfiguration~10 seconds

CVE-2024-32870 Scanner

CVE-2024-32870 Scanner - Information Disclosure vulnerability in Combodo iTop

Used 2.9k times · 3.3k assets checked · url

Scanner page →Run scanner

CVE history: itop

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →