CVE-2018-14593: High severity otrs faq vulnerability
Published Aug 3, 2018
·Updated
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.
Affected Software
6 affected componentsFixes available
debian/otrs2
6.0.16-26.0.16-2+deb10u16.0.32-6
OTRS Open Ticket Request System>=4.0.0<=4.0.30
OTRS Open Ticket Request System>=5.0.0<=5.0.28
OTRS Open Ticket Request System>=6.0.0<=6.0.9
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Event History
Aug 3, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14593?
CVE-2018-14593 is considered a critical privilege escalation vulnerability.
2
How do I fix CVE-2018-14593?
To mitigate CVE-2018-14593, upgrade OTRS to version 6.0.16-2 or later.
3
Which versions of OTRS are affected by CVE-2018-14593?
CVE-2018-14593 affects OTRS versions from 4.0.x up to 4.0.30, 5.0.x up to 5.0.28, and 6.0.x up to 6.0.9.
4
Who can exploit CVE-2018-14593?
An attacker who is already logged in as an agent in OTRS can exploit CVE-2018-14593.
5
What platforms are impacted by CVE-2018-14593?
CVE-2018-14593 impacts OTRS installations on Debian Linux versions 8.0 and 9.0.