Security Advisory

CVE-2011-2385

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-07-19 20:00:00

Last updated 2024-08-06 23:00:33

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

← Browse all CVEs View on cve.org ↗