PT-2018-12603 · Otrs+1 · Otrs+1

Francesco Sirocco · Publicado 2018-08-03 · Atualizado 2019-10-03 · CVE-2018-14593

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 4.0.x through 4.0.30 Open Ticket Request System (OTRS) versions 5.0.x through 5.0.28 Open Ticket Request System (OTRS) versions 6.0.x through 6.0.9

Description An issue was discovered that allows an attacker who is logged in as an agent to escalate their privileges by accessing a specially crafted URL.

Recommendations For versions 4.0.x through 4.0.30, update to a version that contains a fix for this issue. For versions 5.0.x through 5.0.28, update to a version that contains a fix for this issue. For versions 6.0.x through 6.0.9, update to a version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2018-14593

DLA-1473-1

DSA-4317-1

OPENSUSE-SU-2018_3005-1

Produtos afetados

Otrs

Suse

Referências · 13

• https://community.otrs.com/security-advisory-2018-03-security-update-for-otrs-framework/?lang=de · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-14593 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14593 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4317-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14593 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2018-14593 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-14593 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-14593 · Aviso do Fabricante
• https://debian.org/security/2018/dsa-4317 · Aviso do Fabricante
• https://community.otrs.com/security-advisory-2018-03-security-update-for-otrs-framework · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14593 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2018/08/msg00021.html · Nota
• https://osv.dev/vulnerability/DLA-1473-1 · Aviso do Fabricante