FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2014-9324

This CVE name corresponds to:

Entered Topic
2014-12-16 otrs -- Incomplete Access Control

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2014-9324 at cve.mitre.org

Details

Type Candidate
Name CVE-2014-9324
Phase Assigned(20141207)

Description

The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors.

References

Source Reference
CONFIRM https://www.otrs.com/security-advisory-2014-06-incomplete-access-control/
CONFIRM http://advisories.mageia.org/MGASA-2015-0031.html
MANDRIVA MDVSA-2015:043
SECUNIA 59875
SECUNIA 62662

Copyright © 2005 The MITRE Corporation.

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.