CVE-2011-2385

{"id": "CVE-2011-2385", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-07-19T20:55:01.117", "references": [{"url": "http://osvdb.org/73885", "source": "cve@mitre.org"}, {"url": "http://otrs.org/advisory/OSA-2011-02-en/", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/45227", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/48678", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/73885", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://otrs.org/advisory/OSA-2011-02-en/", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/45227", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/48678", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."}, {"lang": "es", "value": "El paquete iPhoneHandle v0.9.x anterior a v0.9.7 y v1.0.x anterios a v1.0.3 en Open Ticket Request System (OTRS) no restringe adecuadamente el uso de intefaces de iPhoneHandle, lo que permite a usuarios autenticados de forma remota obtener privilegios, y en consecuencia, leer o modificar objetos OTRS, a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:28:10.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "166CEE25-B287-47B8-92A4-96D504F5C3A7"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "440BEDBC-5E1F-41A3-B327-31E0A5B72621"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F6A91FD-7B80-4572-8966-055038473E0B"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19F565FC-D1FF-43B8-8C00-C11FAC90E9D1"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93B55CE0-0113-4790-AC6F-5523D1B0E126"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A65E58C-C4D3-47C9-83E4-C7CF2E9103C6"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "269242CA-918A-4537-8A51-E9AFE80F14B5"}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76856D48-6075-49F2-8C76-C3D6AC0985FE"}, {"criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DC98827-8C46-4D35-A3A8-106040AE0499"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}