322 matches found
CVE-2013-2625
Removed by vendor...
CVE-2013-2625
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified...
CVE-2013-2625
CVE-2013-2625 is an Access Bypass in OTRS where access rights by the object linking mechanism were not verified. Affected products/versions include OTRS Help Desk prior to 3.2.4, 3.1.14, 3.0.19 and OTRS ITSM prior to 3.2.3, 3.1.8, 3.0.7, as well as related FAQ versions. The issue is network-explo...
PT-2019-6896
Name of the Vulnerable Software and Affected Versions OTRS Help Desk versions prior to 3.2.4 OTRS ITSM versions prior to 3.2.3 FAQ versions prior to 2.2.3 Description An Access Bypass issue exists due to the lack of verification of access rights by the object linking mechanism. Recommendations Fo...
CVE-2013-2625: Improper Privilege Management
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified...
CVE-2019-16755
BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all...
Design/Logic Flaw
BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all...
CVE-2019-16755
BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all...
CVE-2019-16755
CVE-2019-16755 affects BMC Remedy ITSM Suite (DWP and SmartIT components). Affected DWP: 3.x–18.x (all versions, service packs, patches). Affected SmartIT: 1.x, 2.0, 18.05, 18.08, 19.02 (all versions, service packs, patches). The vulnerability is described as unspecified in the public description...
CVE-2019-16755: Deserialization of Untrusted Data
BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all...
PT-2019-14814
Name of the Vulnerable Software and Affected Versions BMC Remedy ITSM Suite DWP versions 3.x through 18.x BMC Remedy ITSM Suite SmartIT versions 1.x through 19.02 Description The issue allows remote attackers to execute remote commands on the operating system running the targeted application...
CVE-2019-9753
An issue was discovered in Open Ticket Request System OTRS 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ...
CVE-2019-9753
An issue was discovered in Open Ticket Request System OTRS 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ...
Design/Logic Flaw
An issue was discovered in Open Ticket Request System OTRS 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ...
CVE-2019-9753
An issue was discovered in Open Ticket Request System OTRS 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ...
CVE-2019-9753
Removed by vendor...
CVE-2019-9753
An issue was discovered in Open Ticket Request System OTRS 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ...
CVE-2019-9753
OTRS 7.x before 7.0.5 has an information disclosure vulnerability (CVE-2019-9753). An authenticated user (agent or customer) can use search result screens to disclose data from internal entities: Custom Pages, FAQ Articles, Service Catalogue Items, and ITSM Configuration Items. Root cause: inform...