CVE-2014-9324 | BDVDB-2026-66892 Detail

Description#

The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/62188
http://advisories.mageia.org/MGASA-2015-0031.html
https://www.otrs.com/security-advisory-2014-06-incomplete-access-control/
http://secunia.com/advisories/59875
http://secunia.com/advisories/62662
http://www.mandriva.com/security/advisories?name=MDVSA-2015:043

Exploit#

No public exploit known

History#

Version 12014-12-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.