|
|
| |
|
| |
otrs2: privilege escalation
| Package(s): | otrs2 |
CVE #(s): | CVE-2013-3551
|
| Created: | May 29, 2013 |
Updated: | May 30, 2013 |
| Description: |
From the Debian advisory:
A vulnerability has been discovered in the Open Ticket Request System,
which can be exploited by malicious users to disclose potentially
sensitive information.
An attacker with a valid agent login could manipulate URLs in the ticket
split mechanism to see contents of tickets and they are not permitted to
see. |
| Alerts: |
|
( Log in to post comments)
|
|
|