26 matches found
DEBIAN-CVE-2010-4768
Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...
CVE-2010-4768
Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...
CVE-2010-4768
OTRS
CVE-2010-4768: Undefined Security Weakness
Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...
PT-2011-1717
Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.3.5 Description The issue allows remote authenticated users to bypass intended queue access restrictions by visiting a ticket, related to a certain ordering of permission-set and...
CVE-2006-4620: Undefined Security Weakness
The usereditaccount.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox...