PT-2019-6896 · Otrs · Otrs Itsm+2

Publicado 2019-11-27 · Atualizado 2024-06-15 · CVE-2013-2625

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OTRS Help Desk versions prior to 3.2.4 OTRS ITSM versions prior to 3.2.3 FAQ versions prior to 2.2.3

Description An Access Bypass issue exists due to the lack of verification of access rights by the object linking mechanism.

Recommendations For OTRS Help Desk versions prior to 3.2.4, update to version 3.2.4 or later. For OTRS ITSM versions prior to 3.2.3, update to version 3.2.3 or later. For FAQ versions prior to 2.2.3, update to version 2.2.3 or later.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2013-2625

OPENSUSE-SU-2024:10073-1

Produtos afetados

Faq

Otrs Help Desk

Otrs Itsm

Referências · 24

• http://archives.neohapsis.com/archives/bugtraq/2013-08/0009.html · Nota
• https://suse.com/security/cve/CVE-2013-4717 · Nota
• https://suse.com/security/cve/CVE-2014-2553 · Nota
• https://suse.com/security/cve/CVE-2013-2637 · Nota
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html · Nota
• https://suse.com/security/cve/CVE-2014-9324 · Nota
• https://suse.com/security/cve/CVE-2013-3551 · Nota
• https://osv.dev/vulnerability/CVE-2013-2625 · Aviso do Fabricante
• http://securityfocus.com/bid/58936 · Nota
• https://suse.com/security/cve/CVE-2014-2554 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2625 · Nota
• https://suse.com/security/cve/CVE-2012-2582 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2625 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-9139 · Nota
• https://suse.com/security/cve/CVE-2012-4751 · Nota