First published: Fri Mar 18 2011(Updated: )
The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
OTRS | <=2.2.7 | |
OTRS | =0.5-beta1 | |
OTRS | =0.5-beta2 | |
OTRS | =0.5-beta3 | |
OTRS | =0.5-beta4 | |
OTRS | =0.5-beta5 | |
OTRS | =0.5-beta6 | |
OTRS | =0.5-beta7 | |
OTRS | =0.5-beta8 | |
OTRS | =1.0-rc1 | |
OTRS | =1.0-rc2 | |
OTRS | =1.0-rc3 | |
OTRS | =1.0.0 | |
OTRS | =1.0.1 | |
OTRS | =1.0.2 | |
OTRS | =1.1-rc1 | |
OTRS | =1.1.0-rc1 | |
OTRS | =1.1.0-rc2 | |
OTRS | =1.1.1 | |
OTRS | =1.1.2 | |
OTRS | =1.1.3 | |
OTRS | =1.1.4 | |
OTRS | =1.2.0-beta1 | |
OTRS | =1.2.0-beta2 | |
OTRS | =1.2.0-beta3 | |
OTRS | =1.2.1 | |
OTRS | =1.2.2 | |
OTRS | =1.2.3 | |
OTRS | =1.2.4 | |
OTRS | =1.3.0-beta1 | |
OTRS | =1.3.0-beta2 | |
OTRS | =1.3.0-beta3 | |
OTRS | =1.3.0-beta4 | |
OTRS | =1.3.1 | |
OTRS | =1.3.2 | |
OTRS | =1.3.3 | |
OTRS | =2.0.0 | |
OTRS | =2.0.0-beta1 | |
OTRS | =2.0.0-beta2 | |
OTRS | =2.0.0-beta4 | |
OTRS | =2.0.0-beta5 | |
OTRS | =2.0.0-beta6 | |
OTRS | =2.0.1 | |
OTRS | =2.0.2 | |
OTRS | =2.0.3 | |
OTRS | =2.0.4 | |
OTRS | =2.0.5 | |
OTRS | =2.1.0-beta1 | |
OTRS | =2.1.0-beta2 | |
OTRS | =2.1.1 | |
OTRS | =2.1.2 | |
OTRS | =2.1.3 | |
OTRS | =2.1.4 | |
OTRS | =2.1.5 | |
OTRS | =2.1.6 | |
OTRS | =2.1.7 | |
OTRS | =2.1.8 | |
OTRS | =2.1.9 | |
OTRS | =2.2.0-beta1 | |
OTRS | =2.2.0-beta2 | |
OTRS | =2.2.0-beta3 | |
OTRS | =2.2.0-beta4 | |
OTRS | =2.2.0-rc1 | |
OTRS | =2.2.1 | |
OTRS | =2.2.2 | |
OTRS | =2.2.3 | |
OTRS | =2.2.4 | |
OTRS | =2.2.5 | |
OTRS | =2.2.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-7279 has been classified as a medium to high severity vulnerability due to the potential for unauthorized access to customer tickets.
To fix CVE-2008-7279, upgrade to OTRS version 2.2.8 or later, where the vulnerability is addressed.
CVE-2008-7279 affects all versions of Open Ticket Request System (OTRS) prior to version 2.2.8.
CVE-2008-7279 is an access control vulnerability that allows remote authenticated users to circumvent restrictions.
Systems running OTRS versions 2.2.7 and earlier, as well as various beta versions from 0.5 to 2.2.6, are at risk from CVE-2008-7279.