CVE-2014-9324 — Help Desk vulnerability

CWE-2645 documents5 sources
Severity
6.0MEDIUMNVD
EPSS
1.0%
top 23.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Otrs Help Desk
Timeline
PublishedDec 19
Latest updateMay 17

Description

The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 6.8 | Impact: 6.4

Affected Packages1 packages

▶NVDotrs/otrs_help_desk31 versions+30

🔴Vulnerability Details

3
GHSA
GHSA-p3h2-r83w-vg3r: The GenericInterface in OTRS Help Desk 3↗2022-05-17
▶
CVEList
CVE-2014-9324: The GenericInterface in OTRS Help Desk 3↗2014-12-19
▶
OSV
CVE-2014-9324: The GenericInterface in OTRS Help Desk 3↗2014-12-19
▶

📋Vendor Advisories

1
Debian
CVE-2014-9324: otrs2 - The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11,...↗2014
▶
CVE-2014-9324 — Otrs Help Desk vulnerability | cvebase