PT-2017-18844 · Otrs+1 · Otrs+1

Joerg-Thomas Vogt · Published 2017-06-09 · Updated 2019-10-03 · CVE-2017-9324

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 3.3.x through 3.3.16 Open Ticket Request System (OTRS) versions 4.x through 4.0.23 Open Ticket Request System (OTRS) versions 5.x through 5.0.19

Description An issue allows an attacker with agent permission to gain administrative privileges by opening a specific URL in a browser. This enables the attacker to read and change all system settings. The vulnerable URLs contain "index.pl?Action=Installer" with ";Subaction=Intro", ";Subaction=Start", or ";Subaction=System" appended.

Recommendations For versions 3.3.x through 3.3.16, avoid using the "index.pl?Action=Installer" URL with ";Subaction=Intro", ";Subaction=Start", or ";Subaction=System" until a patch is available. For versions 4.x through 4.0.23, restrict access to the "index.pl?Action=Installer" URL with ";Subaction=Intro", ";Subaction=Start", or ";Subaction=System" to minimize the risk of exploitation. For versions 5.x through 5.0.19, consider disabling the Action=Installer functionality until a fix is provided.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALT-PU-2017-2623

CVE-2017-9324

DSA-3876-1

Affected Products

Alt Linux

Otrs

References · 11

• https://cve.org/CVERecord?id=CVE-2017-9324 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9324 · Vendor Advisory
• http://debian.org/security/2017/dsa-3876 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9324 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3876-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-9324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9324 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9324 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9324 · Vendor Advisory
• https://otrs.com/security-advisory-2017-03-security-update-otrs-versions · Vendor Advisory
• https://packetstormsecurity.com/files/142862/OTRS-Install-Dialog-Disclosure.html · Note