CVE-2010-4763
N/A
N/A
Summary
The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the (1) Status, (2) Service, and (3) Queue via selections.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://bugs.otrs.org/show_bug.cgi?id=4399
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
References
- http://bugs.otrs.org/show_bug.cgi?id=4399
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.