PT-2024-2034 · Otrs · Otrs

Matthias Püschel · Published 2024-01-29 · Updated 2024-02-02 · CVE-2024-23792

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions OTRS versions 7.0.X through 7.0.48 OTRS versions 8.0.X through 8.0.37 OTRS versions 2023.X through 2023.1.1

Description The issue is related to the handling of attachments in ticket comments, allowing another user to add attachments impersonating the original user. This requires a logged-in other user to know the UUID. While the legitimate user completes the comment, the malicious user can add more files to the comment. The attack exploits weaknesses in the authentication procedure.

Recommendations For OTRS versions 7.0.X through 7.0.48, update to a version outside of this range to resolve the issue. For OTRS versions 8.0.X through 8.0.37, update to a version outside of this range to resolve the issue. For OTRS versions 2023.X through 2023.1.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the attachment feature in ticket comments until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2024-01912

CVE-2024-23792

Affected Products

Otrs

References · 10

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-23792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23792 · Security Note
• https://otrs.com/release-notes/otrs-security-advisory-2024-03 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-23792 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23792 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01912 · Security Note
• https://ubuntu.com/security/CVE-2024-23792 · Vendor Advisory
• https://t.me/cvenotify/69043 · Telegram Post
• https://twitter.com/CVEnew/status/1751902439307939852 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1751930736700019088 · Twitter Post