Description (CNA)
The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://bugs.otrs.org/show_bug.cgi?id=3103
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
ADP enrichment
No English description supplied.