Lucene search

[email protected]CVE-2011-2385

HistoryJul 19, 2011 - 8:55 p.m.

CVE-2011-2385

2011-07-1920:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2011-2385

iphonehandle

otrs

remote authentication

privilege escalation

6.7 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.5%

JSON

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

CPENameOperatorVersion
otrs:iphonehandleotrs iphonehandleeq0.9.5
otrs:iphonehandleotrs iphonehandleeq0.9.4
otrs:iphonehandleotrs iphonehandleeq1.0.2
otrs:iphonehandleotrs iphonehandleeq1.0.1
otrs:iphonehandleotrs iphonehandleeq0.9.2
otrs:iphonehandleotrs iphonehandleeq0.9.3
otrs:iphonehandleotrs iphonehandleeq0.9.6
otrs:otrsotrseq*
otrs:iphonehandleotrs iphonehandleeq0.9.1

CPE	Name	Operator	Version
otrs:iphonehandle	otrs iphonehandle	eq	0.9.5
otrs:iphonehandle	otrs iphonehandle	eq	0.9.4
otrs:iphonehandle	otrs iphonehandle	eq	1.0.2
otrs:iphonehandle	otrs iphonehandle	eq	1.0.1
otrs:iphonehandle	otrs iphonehandle	eq	0.9.2
otrs:iphonehandle	otrs iphonehandle	eq	0.9.3
otrs:iphonehandle	otrs iphonehandle	eq	0.9.6
otrs:otrs	otrs	eq	*
otrs:iphonehandle	otrs iphonehandle	eq	0.9.1

References

osvdb.org/73885

otrs.org/advisory/OSA-2011-02-en/

secunia.com/advisories/45227

www.securityfocus.com/bid/48678

exchange.xforce.ibmcloud.com/vulnerabilities/68558

6.7 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.5%

JSON

Related for CVE-2011-2385

prion1 cvelist1 debiancve1