Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2008-7279
HistoryMar 18, 2011 - 4:55 p.m.

CVE-2008-7279

2011-03-1816:55:01
Debian Security Bug Tracker
security-tracker.debian.org
13
open ticket request system
remote authenticated users
access restrictions

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.002

Percentile

59.0%

The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian11allotrs2< 2.3.2-1otrs2_2.3.2-1_all.deb

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.002

Percentile

59.0%

Related for DEBIANCVE:CVE-2008-7279