PT-2014-8935 · Otrs · Otrs Help Desk

Publicado 2014-12-19 · Atualizado 2024-06-15 · CVE-2014-9324

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OTRS Help Desk versions 3.2.x through 3.2.16 OTRS Help Desk versions 3.3.x through 3.3.10 OTRS Help Desk versions 4.0.x through 4.0.2

Description The issue allows remote authenticated users to access and modify arbitrary tickets.

Recommendations For OTRS Help Desk versions 3.2.x through 3.2.16, update to version 3.2.17 or later. For OTRS Help Desk versions 3.3.x through 3.3.10, update to version 3.3.11 or later. For OTRS Help Desk versions 4.0.x through 4.0.2, update to version 4.0.3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9324

DSA-3124-1

MGASA-2015-0031

OPENSUSE-SU-2024:10073-1

Produtos afetados

Otrs Help Desk

Referências · 36

• https://suse.com/security/cve/CVE-2014-9324 · Nota
• https://debian.org/security/2015/dsa-3124 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9324 · Nota
• http://advisories.mageia.org/MGASA-2015-0031.html · Nota
• https://packages.debian.org/src:otrs2 · Nota
• http://secunia.com/advisories/62188 · Nota
• https://otrs.com/security-advisory-2014-06-incomplete-access-control · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-2553 · Nota
• https://suse.com/security/cve/CVE-2013-4088 · Nota
• https://suse.com/security/cve/CVE-2013-2637 · Nota
• https://suse.com/security/cve/CVE-2012-2582 · Nota
• https://suse.com/security/cve/CVE-2013-3551 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0031 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-2625 · Nota
• https://osv.dev/vulnerability/DSA-3124-1 · Aviso do Fabricante