PT-2011-4058 · Otrs · Otrs

Published 2011-08-29 · Updated 2011-09-23 · CVE-2011-2746

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OTRS versions 2.x through 2.4.10 OTRS versions 3.x through 3.0.9

Description The issue allows remote authenticated administrators to read arbitrary files. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For OTRS versions 2.x through 2.4.10, update to version 2.4.11 or later. For OTRS versions 3.x through 3.0.9, update to version 3.0.10 or later.

Fix

Related Identifiers

CVE-2011-2746

Affected Products

Otrs

References · 11

• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2746 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2746 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2746 · Security Note
• http://secunia.com/advisories/45701 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2011-09/msg00011.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2746 · Vendor Advisory
• http://otrs.org/advisory/OSA-2011-03-en · Vendor Advisory
• http://secunia.com/advisories/45894 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2746 · Note
• http://securityfocus.com/bid/49251 · Note
• http://osvdb.org/74602 · Note