Published: 04/08/2018 Updated: 03/10/2019

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

An issue exists in Open Ticket Request System (OTRS) 6.0.x up to and including 6.0.9, 5.0.x up to and including 5.0.28, and 4.0.x up to and including 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
otrs open ticket request system
debian debian linux 8.0
debian debian linux 9.0

Three vulnerabilities were discovered in the Open Ticket Request System which could result in privilege escalation or denial of service For the stable distribution (stretch), these problems have been fixed in version 5016-1+deb9u6 We recommend that you upgrade your otrs2 packages For the detailed security status of otrs2 please refer to its se ...

NVD-CWE-noinfo https://community.otrs.com/security-advisory-2018-03-security-update-for-otrs-framework/?lang=de https://lists.debian.org/debian-lts-announce/2018/08/msg00021.html https://www.debian.org/security/2018/dsa-4317 https://nvd.nist.gov https://www.debian.org/security/./dsa-4317

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-14593

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect