CVE-2008-1515
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.4 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.5%
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to “read and modify objects” via SOAP requests, related to “Missing security checks.”
Affected configurations
References
lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
otrs.org/advisory/OSA-2008-01-en/
secunia.com/advisories/29585
secunia.com/advisories/29622
secunia.com/advisories/29859
www.securityfocus.com/bid/28647
exchange.xforce.ibmcloud.com/vulnerabilities/41577
www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
Related
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.4 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.5%