CVE-2008-1515

published 2008-04-01

CVE-2008-1515: The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to…

Priority P4 31 medium 6.4 CVSS 2.0

AV N AC L Au N C P I P A N

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	otrs2	< otrs2 2.2.5-2 (bullseye)	otrs2 2.2.5-2 (bullseye)
otrs	otrs	>= 2.1.0 < 2.1.8	2.1.8
otrs	otrs	>= 2.2.0 < 2.2.6	2.2.6

CVSS provenance

nvd v2.0 6.4 MEDIUM AV:N/AC:L/Au:N/C:P/I:P/A:N

osv 6.4 MEDIUM

vendor_debian 6.4 MEDIUM

vendor_redhat 6.4 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264