Lucene search

K
cvelistMitreCVELIST:CVE-2013-3551
HistoryFeb 21, 2020 - 3:35 p.m.

CVE-2013-3551

2020-02-2115:35:41
mitre
raw.githubusercontent.com
1

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, and OTRS ITSM 3.0.x before 3.0.8, 3.1.x before 3.1.9, and 3.2.x before 3.2.5 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%