Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-7283HistoryMar 18, 2011 - 4:55 p.m.
CVE-2008-7283
2011-03-1816:55:01
Debian Security Bug Tracker
security-tracker.debian.org
16
otrs
customer group
vulnerability
web-interface
access restrictions
unix
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS
0.002
Percentile
59.0%
Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | otrs2 | < 2.2.6-1 | otrs2_2.2.6-1_all.deb |
Related
cve
cve
CVE-2008-7283
2011-03-18 16:55:01
nvd
nvd
CVE-2008-7283
2011-03-18 16:55:01
ubuntucve
ubuntucve
CVE-2008-7283
2011-03-18 00:00:00
prion
prion
Open redirect
2011-03-18 16:55:00
cvelist
cvelist
CVE-2008-7283
2011-03-18 16:00:00
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS
0.002
Percentile
59.0%
Related for DEBIANCVE:CVE-2008-7283