A critical vulnerability in Combodo iTop permits authenticated users to achieve remote code execution by deleting a configuration file used for system integrity.

This is a code injection vulnerability (CWE-94) where the deletion of the .readonly file, which normally restricts write operations, allows an attacker with high privileges to execute arbitrary code on the underlying server.

Successful exploitation of this flaw grants an attacker full control over the iTop instance, leading to total compromise of sensitive IT service management data. Given the CVSS score of 9.4, this represents a critical risk that could result in unauthorized data access, system disruption, or lateral movement within the network.

Immediate Action: Update the iTop installation to version 3.2.3 or later immediately to apply the vendor-supplied security fix.

Proactive Monitoring: Review web server access logs for unusual deletion requests targeting the .readonly file or suspicious POST requests to administrative endpoints.

Compensating Controls: Implement a Web Application Firewall (WAF) to block unauthorized attempts to modify or delete sensitive configuration files within the application directory.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability, combined with the potential for complete system takeover, requires immediate attention. Administrators must upgrade to version 3.2.3 as soon as possible to neutralize the risk of code execution.