Description (CNA)
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/29622
- http://secunia.com/advisories/29859
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://otrs.org/advisory/OSA-2008-01-en/
- http://www.securityfocus.com/bid/28647
- http://secunia.com/advisories/29585
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/29622
- http://secunia.com/advisories/29859
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://otrs.org/advisory/OSA-2008-01-en/
- http://www.securityfocus.com/bid/28647
- http://secunia.com/advisories/29585
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577