CVE-2008-7277
N/A
N/A
Summary
Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://bugs.otrs.org/show_bug.cgi?id=3045
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
References
- http://bugs.otrs.org/show_bug.cgi?id=3045
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.