I-doit vulnerabilities
We track 3 vulnerabilities in I-doit products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2024.
Latest I-doit vulnerabilities
- 7.5 High severity
Idoit pro: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cmdb/isys_api_model_cmdb_objects_by_relation.class.php and retr
- 9.8 Critical severity
I-doit: Weak Password Requirements
I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack.
- 9.8 Critical severity
I-doit: Use of Hard-coded Credentials
i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vuln