CVEvulnerability

CVE-2013-2625

6.5 MEDIUM Published 2019-11-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2019-11-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-269

Description

An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified

Affected configurations

• otrs faq (>= 2.0.0 < 2.0.8) • otrs faq (>= 2.1.0 < 2.1.4) • otrs faq (>= 2.2.0 < 2.2.3) • otrs otrs help desk (>= 3.0.0 < 3.0.19) • otrs otrs help desk (>= 3.1.0 < 3.1.14) • otrs otrs help desk (> 3.2.0 < 3.2.4) • otrs otrs itsm (>= 3.0.0 < 3.0.7) • otrs otrs itsm (>= 3.1.0 < 3.1.8) • otrs otrs itsm (>= 3.2.0 < 3.2.3) • debian debian linux 8.0 • debian debian linux 9.0 • debian debian linux 10.0 • opensuse opensuse 12.2 • opensuse opensuse 12.3

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References