PT-2011-1717

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.3.5 Description The issue allows remote authenticated users to bypass intended queue access restrictions by visiting a ticket, related to a certain ordering of permission-set and...

CVE-2010-4768: Undefined Security Weakness

Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...