Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-5056HistoryMar 18, 2011 - 4:55 p.m.
CVE-2009-5056
2011-03-1816:55:01
Debian Security Bug Tracker
security-tracker.debian.org
10
otrs
ticket access
vulnerability
cve-2009-5056
access restriction
unix
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
EPSS
0.001
Percentile
49.8%
Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-tickets list.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | otrs2 | < 2.4.5-1 | otrs2_2.4.5-1_all.deb |
Related
nvd
nvd
CVE-2009-5056
2011-03-18 16:55:01
openvas
openvas
OTRS < 2.4.0-beta2 'move_into' Restriction Bypass Vulnerability
2013-09-20 00:00:00
ubuntucve
ubuntucve
CVE-2009-5056
2011-03-18 00:00:00
prion
prion
Open redirect
2011-03-18 16:55:00
cvelist
cvelist
CVE-2009-5056
2011-03-18 16:00:00
cve
cve
CVE-2009-5056
2011-03-18 16:55:01
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
EPSS
0.001
Percentile
49.8%
Related for DEBIANCVE:CVE-2009-5056