PT-2019-6896 · Otrs · Otrs Itsm+2

Published 2019-11-27 · Updated 2024-06-15 · CVE-2013-2625

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OTRS Help Desk versions prior to 3.2.4 OTRS ITSM versions prior to 3.2.3 FAQ versions prior to 2.2.3

Description An Access Bypass issue exists due to the lack of verification of access rights by the object linking mechanism.

Recommendations For OTRS Help Desk versions prior to 3.2.4, update to version 3.2.4 or later. For OTRS ITSM versions prior to 3.2.3, update to version 3.2.3 or later. For FAQ versions prior to 2.2.3, update to version 2.2.3 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2013-2625

OPENSUSE-SU-2024:10073-1

Affected Products

Faq

Otrs Help Desk

Otrs Itsm

References · 24

• https://osv.dev/vulnerability/CVE-2013-2625 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2625 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-2625 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2625 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10073-1 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2013-08/0009.html · Note
• https://suse.com/security/cve/CVE-2013-4717 · Note
• https://suse.com/security/cve/CVE-2014-2553 · Note
• https://suse.com/security/cve/CVE-2013-2637 · Note
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html · Note
• https://suse.com/security/cve/CVE-2014-9324 · Note
• https://suse.com/security/cve/CVE-2013-3551 · Note
• http://securityfocus.com/bid/58936 · Note
• https://suse.com/security/cve/CVE-2014-2554 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2625 · Note