CVE-2011-2385: Medium severity otrs vulnerability
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2385?
CVE-2011-2385 has a medium severity level due to its impact on privilege escalation and unauthorized access to OTRS core objects.
How do I fix CVE-2011-2385?
To fix CVE-2011-2385, upgrade the iPhoneHandle package to version 0.9.7 or 1.0.3 or later.
Which versions of iPhoneHandle are affected by CVE-2011-2385?
Versions 0.9.1 to 0.9.6 and 1.0.1 to 1.0.2 of the iPhoneHandle package are affected by CVE-2011-2385.
Can CVE-2011-2385 be exploited by unauthenticated users?
No, CVE-2011-2385 can only be exploited by authenticated users who have access to the iPhoneHandle interface.
What types of attacks can be performed due to CVE-2011-2385?
CVE-2011-2385 can allow attackers to escalate privileges, enabling them to read or modify sensitive OTRS core objects.