CVE-2013-2625

CVE-2013-2625 is an Access Bypass in OTRS where access rights by the object linking mechanism were not verified. Affected products/versions include OTRS Help Desk prior to 3.2.4, 3.1.14, 3.0.19 and OTRS ITSM prior to 3.2.3, 3.1.8, 3.0.7, as well as related FAQ versions. The issue is network-explo...

CVE-2014-9324

CVE-2014-9324 affects OTRS Help Desk: GenericInterface access-control problems allow remote authenticated users to access and modify ticket data. Affected versions are OTRS 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3. Consequences include unauthorized ticket data access/manip...