Vulnerability Details CVE-2018-14593
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- https://community.otrs.com/security-advisory-2018-03-security-update-for-otrs-framework/?lang=de
- https://lists.debian.org/debian-lts-announce/2018/08/msg00021.html
- https://www.debian.org/security/2018/dsa-4317
- https://community.otrs.com/security-advisory-2018-03-security-update-for-otrs-framework/?lang=de
- https://lists.debian.org/debian-lts-announce/2018/08/msg00021.html
- https://www.debian.org/security/2018/dsa-4317
Products affected by CVE-2018-14593
-
cpe:2.3:a:otrs:open_ticket_request_system:*
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0