Security Advisory

CVE-2010-4768

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-03-18 16:00:00

Last updated 2024-09-16 23:11:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions.

← Browse all CVEs View on cve.org ↗