Vulnerability Details CVE-2008-1515
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v2 Score 6.4
References
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://otrs.org/advisory/OSA-2008-01-en/
- http://secunia.com/advisories/29585
- http://secunia.com/advisories/29622
- http://secunia.com/advisories/29859
- http://www.securityfocus.com/bid/28647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://otrs.org/advisory/OSA-2008-01-en/
- http://secunia.com/advisories/29585
- http://secunia.com/advisories/29622
- http://secunia.com/advisories/29859
- http://www.securityfocus.com/bid/28647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
Products affected by CVE-2008-1515
-
cpe:2.3:a:otrs:otrs:2.1.0
-
cpe:2.3:a:otrs:otrs:2.1.1
-
cpe:2.3:a:otrs:otrs:2.1.2
-
cpe:2.3:a:otrs:otrs:2.1.3
-
cpe:2.3:a:otrs:otrs:2.1.4
-
cpe:2.3:a:otrs:otrs:2.1.5
-
cpe:2.3:a:otrs:otrs:2.1.6
-
cpe:2.3:a:otrs:otrs:2.1.7
-
cpe:2.3:a:otrs:otrs:2.2.0
-
cpe:2.3:a:otrs:otrs:2.2.1
-
cpe:2.3:a:otrs:otrs:2.2.2
-
cpe:2.3:a:otrs:otrs:2.2.3
-
cpe:2.3:a:otrs:otrs:2.2.4
-
cpe:2.3:a:otrs:otrs:2.2.5