CVE-2008-7282

2022-10-0316:13:53

mitre

www.cve.org

otrs

access restrictions

remote authenticated users

security vulnerability

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.4%

JSON

Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options are enabled, allows remote authenticated users to bypass intended access restrictions, and perform certain (1) list and (2) write operations on queues, via unspecified vectors.