CVE Vulnerabilities

CVE-2011-2385

Published: Jul 19, 2011 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Iphonehandle Otrs 0.9.1 (including) 0.9.1 (including)
Iphonehandle Otrs 0.9.2 (including) 0.9.2 (including)
Iphonehandle Otrs 0.9.3 (including) 0.9.3 (including)
Iphonehandle Otrs 0.9.4 (including) 0.9.4 (including)
Iphonehandle Otrs 0.9.5 (including) 0.9.5 (including)
Iphonehandle Otrs 0.9.6 (including) 0.9.6 (including)
Iphonehandle Otrs 1.0.1 (including) 1.0.1 (including)
Iphonehandle Otrs 1.0.2 (including) 1.0.2 (including)
Otrs Otrs * *

References