CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
Percentile
80.2%
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows
remote attackers to “read and modify objects” via SOAP requests, related to
“Missing security checks.”
Author | Note |
---|---|
jdstrand | otrs 1.x and 2.0.x not affected |