On-premise vulnerabilities

2 known vulnerabilities in On-premise from Itarian. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ITarian platform (SAAS / on-premise): Improperly Implemented Security Check for Standard

  CVE-2022-25152Jun 9, 2022ItarianEPSS 1.89%

  The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any version prior to 6.35

• 7.5 High severity

  ITarian SaaS platform / on-premise: Incorrect Permission Assignment for Critical Resource

  CVE-2022-25151Jun 9, 2022Itarian

  Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker could exploit this vulnerability to gain access to the manageme