CVE-2008-7281: Exposure of Sensitive Information to an Unauthorized Actor

Open Ticket Request System OTRS before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field...

CVE-2010-4766: Improper Input Validation

The AgentTicketForward feature in Open Ticket Request System OTRS before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a...

CVE-2008-7277: Undefined Security Weakness

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

PT-2011-1316

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.4.4 Description The issue allows remote authenticated users to bypass intended access restrictions by visiting a ticket, leveraging single-digit substrings of the CustomerID value. This can b...

CVE-2008-7276: Undefined Security Weakness

Kernel/System/Web/Request.pm in Open Ticket Request System OTRS before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal val...

CVE-2009-5055: Undefined Security Weakness

Open Ticket Request System OTRS before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the...

CVE-2009-5056: Improper Input Validation

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...

CVE-2010-4763: Undefined Security Weakness

The ACL-customer-status Ticket Type setting in Open Ticket Request System OTRS before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the 1 Status, 2 Service, and 3 Queue via selections...

PT-2011-1713

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 2.4.9 and earlier Open Ticket Request System OTRS versions 3.x before 3.0.3 Description The issue concerns the handling of incoming encrypted e-mail messages based on revoked PGP or GPG keys. It does no...

PT-2011-1708

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta7 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon hang, by performing a fulltext search. This is due to the improper...

PT-2011-1712

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta1 Description The issue concerns the ACL-customer-status Ticket Type setting, which fails to restrict ticket options after an AJAX reload. This allows remote authenticated users to...

PT-2011-1710

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta3 Description The issue concerns the customer-interface ticket-print dialog, which fails to properly restrict customer-visible data. This allows remote authenticated users to obtain...

PT-2011-1707

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.3 Description The issue concerns the installer.pl in Open Ticket Request System OTRS, where the Inbound Mail Password field uses the text type instead of the password type for its INPUT...

PT-2011-1268

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.3.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The attack vectors a...

PT-2011-1271

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.2.5 Open Ticket Request System OTRS versions 2.3.x prior to 2.3.0-beta1 Description The issue is related to the S/MIME feature in OTRS, which does not properly configure the RANDFILE...

CVE-2010-4764: Undefined Security Weakness

Open Ticket Request System OTRS before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys, which makes it easier for remote attackers to spoof e-mail communication by leveraging a key that has a revocation...

CVE-2008-7278: Improper Input Validation

The S/MIME feature in Open Ticket Request System OTRS before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available fo...

CVE-2008-7275: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS before 2.3.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 AgentTicketMailbox or 2 CustomerTicketOverView...

CVE-2010-4768: Undefined Security Weakness

Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...

CVE-2010-4761: Undefined Security Weakness

The customer-interface ticket-print dialog in Open Ticket Request System OTRS before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the 1 responsible, 2 owner, 3 accounted time, 4 pending until...