Vulnerability Details CVE-2008-1515
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.4%
CVSS Severity
CVSS v2 Score 6.4
References
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://otrs.org/advisory/OSA-2008-01-en/
- http://secunia.com/advisories/29585
- http://secunia.com/advisories/29622
- http://secunia.com/advisories/29859
- http://www.securityfocus.com/bid/28647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://otrs.org/advisory/OSA-2008-01-en/
- http://secunia.com/advisories/29585
- http://secunia.com/advisories/29622
- http://secunia.com/advisories/29859
- http://www.securityfocus.com/bid/28647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
Products affected by CVE-2008-1515
-
cpe:2.3:a:otrs:otrs:2.1.0
-
cpe:2.3:a:otrs:otrs:2.1.1
-
cpe:2.3:a:otrs:otrs:2.1.2
-
cpe:2.3:a:otrs:otrs:2.1.3
-
cpe:2.3:a:otrs:otrs:2.1.4
-
cpe:2.3:a:otrs:otrs:2.1.5
-
cpe:2.3:a:otrs:otrs:2.1.6
-
cpe:2.3:a:otrs:otrs:2.1.7
-
cpe:2.3:a:otrs:otrs:2.2.0
-
cpe:2.3:a:otrs:otrs:2.2.1
-
cpe:2.3:a:otrs:otrs:2.2.2
-
cpe:2.3:a:otrs:otrs:2.2.3
-
cpe:2.3:a:otrs:otrs:2.2.4
-
cpe:2.3:a:otrs:otrs:2.2.5