CVEvulnerability
CVE-2008-1515
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."
Affected configurations
• otrs otrs (>= 2.1.0 < 2.1.8)
• otrs otrs (>= 2.2.0 < 2.2.6)
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html Third Party Advisory
- http://otrs.org/advisory/OSA-2008-01-en/ Vendor Advisory
- http://secunia.com/advisories/29585 Third Party Advisory
- http://secunia.com/advisories/29622 Third Party Advisory
- http://secunia.com/advisories/29859 Third Party Advisory
- http://www.securityfocus.com/bid/28647 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html Third Party Advisory
- http://otrs.org/advisory/OSA-2008-01-en/ Vendor Advisory
- http://secunia.com/advisories/29585 Third Party Advisory
- http://secunia.com/advisories/29622 Third Party Advisory
- http://secunia.com/advisories/29859 Third Party Advisory
- http://www.securityfocus.com/bid/28647 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html Third Party Advisory