PT-2018-12603
CVE-2018-14593
·
Published
2018-08-03
·
Updated
2026-10-31
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Open Ticket Request System (OTRS) versions 4.0.x through 4.0.30
Open Ticket Request System (OTRS) versions 5.0.x through 5.0.28
Open Ticket Request System (OTRS) versions 6.0.x through 6.0.9
Description
An issue was discovered that allows an attacker who is logged in as an agent to escalate their privileges by accessing a specially crafted URL.
Recommendations
For versions 4.0.x through 4.0.30, update to a version that contains a fix for this issue.
For versions 5.0.x through 5.0.28, update to a version that contains a fix for this issue.
For versions 6.0.x through 6.0.9, update to a version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾