PT-2018-12603
CVE-2018-14593
·
Publicado
2018-08-03
·
Atualizado
2026-10-31
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Open Ticket Request System (OTRS) versions 4.0.x through 4.0.30
Open Ticket Request System (OTRS) versions 5.0.x through 5.0.28
Open Ticket Request System (OTRS) versions 6.0.x through 6.0.9
Description
An issue was discovered that allows an attacker who is logged in as an agent to escalate their privileges by accessing a specially crafted URL.
Recommendations
For versions 4.0.x through 4.0.30, update to a version that contains a fix for this issue.
For versions 5.0.x through 5.0.28, update to a version that contains a fix for this issue.
For versions 6.0.x through 6.0.9, update to a version that contains a fix for this issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾