Published: 28/09/2018 Updated: 21/11/2018

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

In Open Ticket Request System (OTRS) 4.0.x prior to 4.0.32, 5.0.x prior to 5.0.30, and 6.0.x prior to 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.

Vulnerable Product	Search on Vulmon	Subscribe to Product
otrs open ticket request system
debian debian linux 8.0
debian debian linux 9.0

Three vulnerabilities were discovered in the Open Ticket Request System which could result in privilege escalation or denial of service For the stable distribution (stretch), these problems have been fixed in version 5016-1+deb9u6 We recommend that you upgrade your otrs2 packages For the detailed security status of otrs2 please refer to its se ...

CWE-20 https://lists.debian.org/debian-lts-announce/2018/09/msg00033.html https://github.com/OTRS/otrs/commit/d9db0c6a15caafda7689320ecf61777993c33711 https://github.com/OTRS/otrs/commit/d8cae00b0f78c2a07bb10cedb817304139395843 https://github.com/OTRS/otrs/commit/a4a1a01f84fac7ab032570ee50b660e2ebb15c01 https://community.otrs.com/security-advisory-2018-04-security-update-for-otrs-framework/https://www.debian.org/security/2018/dsa-4317 https://nvd.nist.gov https://www.debian.org/security/./dsa-4317

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-16587

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect