Lucene search
+L

26 matches found

OSV
OSV
•added 2011/03/18 4:55 p.m.•19 views

DEBIAN-CVE-2010-4768

Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...

6CVSS6.8AI score0.00972EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2011/03/18 4:00 p.m.•44 views

CVE-2010-4768

Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...

6.2AI score0.00972EPSS
SaveExploits1References2
CVE
CVE
•added 2011/03/18 4:00 p.m.•75 views

CVE-2010-4768

OTRS

6CVSS6.4AI score0.00972EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/03/18 12:00 a.m.•7 views

CVE-2010-4768: Undefined Security Weakness

Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...

6CVSS5.9AI score0.00972EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2011/03/18 12:00 a.m.•5 views

PT-2011-1717

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.3.5 Description The issue allows remote authenticated users to bypass intended queue access restrictions by visiting a ticket, related to a certain ordering of permission-set and...

6CVSS0.00972EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/07 12:00 a.m.•5 views

CVE-2006-4620: Undefined Security Weakness

The usereditaccount.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox...

4.6CVSS5.9AI score0.01215EPSS
SaveExploits0References1
Rows per page
Query Builder