CVE-2017-9324: Improper Privilege Management

In Open Ticket Request System OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URL...

PT-2017-18844

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 3.3.x through 3.3.16 Open Ticket Request System OTRS versions 4.x through 4.0.23 Open Ticket Request System OTRS versions 5.x through 5.0.19 Description An issue allows an attacker with agent permission...