CVEvulnerability
CVE-2011-2385
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
Affected configurations
• otrs iphonehandle 0.9.1
• otrs iphonehandle 0.9.2
• otrs iphonehandle 0.9.3
• otrs iphonehandle 0.9.4
• otrs iphonehandle 0.9.5
• otrs iphonehandle 0.9.6
• otrs iphonehandle 1.0.1
• otrs iphonehandle 1.0.2
• otrs otrs
Related
Weakness · not in database (1)
References
- http://osvdb.org/73885 osvdb.org
- http://otrs.org/advisory/OSA-2011-02-en/ Patch, Vendor Advisory
- http://secunia.com/advisories/45227 Vendor Advisory
- http://www.securityfocus.com/bid/48678 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68558 exchange.xforce.ibmcloud.com
- http://osvdb.org/73885 osvdb.org
- http://otrs.org/advisory/OSA-2011-02-en/ Patch, Vendor Advisory
- http://secunia.com/advisories/45227 Vendor Advisory
- http://www.securityfocus.com/bid/48678 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68558 exchange.xforce.ibmcloud.com