The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:58
Type | Values Removed | Values Added |
---|---|---|
References | () http://bugs.otrs.org/show_bug.cgi?id=3103 - | |
References | () http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 - |
Information
Published : 2011-03-18 16:55
Updated : 2024-11-21 00:58
NVD link : CVE-2008-7279
Mitre link : CVE-2008-7279
CVE.ORG link : CVE-2008-7279
JSON object : View
Products Affected
otrs
- otrs
CWE
CWE-264
Permissions, Privileges, and Access Controls