Description (CNA)
The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/62188
- http://advisories.mageia.org/MGASA-2015-0031.html
- https://www.otrs.com/security-advisory-2014-06-incomplete-access-control/
- http://secunia.com/advisories/59875
- http://secunia.com/advisories/62662
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:043
ADP enrichment
No English description supplied.