CVE-2008-7282
N/A
N/A
Summary
Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options are enabled, allows remote authenticated users to bypass intended access restrictions, and perform certain (1) list and (2) write operations on queues, via unspecified vectors.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://bugs.otrs.org/show_bug.cgi?id=2696
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
References
- http://bugs.otrs.org/show_bug.cgi?id=2696
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.