critical9.8
CVE-2021-28024
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
Impact
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Servicetonic | Servicetonic | before 9.0.035937 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.servicetonic.com/
- https://www.srlabs.de/bites/chaining-three-zero-day-exploits-in-itsm-software-servicetonic-for-remote-code-execution
- https://www.servicetonic.com/
- https://www.srlabs.de/bites/chaining-three-zero-day-exploits-in-itsm-software-servicetonic-for-remote-code-execution