PT-2014-4778

CVE-2014-2554

Published

2014-04-23

Updated

2024-06-15

Description by

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OTRS versions 3.1.x through 3.1.20 OTRS versions 3.2.x through 3.2.15 OTRS versions 3.3.x through 3.3.5

Description The issue allows remote attackers to conduct clickjacking attacks via an IFRAME element.

Recommendations For OTRS versions 3.1.x through 3.1.20, update to version 3.1.21 or later. For OTRS versions 3.2.x through 3.2.15, update to version 3.2.16 or later. For OTRS versions 3.3.x through 3.3.5, update to version 3.3.6 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2014-2554

ALT-PU-2014-2073

DLA-1119-1

MGASA-2014-0194