medium6.0
CVE-2008-7283
Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restriction…
Impact
Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | through 2.2.5 Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2 |