CVE-2018-14593 — Open Ticket Request System vulnerability

4 documents4 sources
Severity
8.8HIGHNVD
EPSS
0.6%
top 29.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Debian Otrs2Otrs Open Ticket Request SystemDebian Linux
Timeline
PublishedAug 4
Latest updateMay 13

Description

An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDotrs/open_ticket_request_system4.0.0 — 4.0.30+2
▶debiandebian/otrs2< otrs2 6.0.10-1 (bullseye)

Also affects: Debian Linux 8.0, 9.0

🔴Vulnerability Details

2
GHSA
GHSA-22wj-vpf8-3m9x: An issue was discovered in Open Ticket Request System (OTRS) 6↗2022-05-13
▶
OSV
CVE-2018-14593: An issue was discovered in Open Ticket Request System (OTRS) 6↗2018-08-04
▶

📋Vendor Advisories

1
Debian
CVE-2018-14593: otrs2 - An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9...↗2018
▶