NVD

Id
7009  
Name
CVE-2008-7282  
Description
Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options are enabled, allows remote authenticated users to bypass intended access restrictions, and perform certain (1) list and (2) write operations on queues, via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2011-03-18  
Modified Date
2011-03-22  
Seq
2008-7282  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39526 7009 CVE-2008-7282 http://bugs.otrs.org/show_bug.cgi?id=2696  View
39527 7009 CVE-2008-7282 http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33539 JVNDB-2011-003781 OTRS の Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm におけるアクセス制限を回避される脆弱性 Open Ticket Request System (OTRS) の Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm は、CustomerPanelOwnSelection または CustomerGroupSupport のオプションが有効になっている際、アクセス制限を回避される、または特定のリストまたは待ち行列の書き込み操作が実行される脆弱性が存在します。 CVE-2008-7282 37395 CVE-2008-7282 7009 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003781.html 2011-03-18 2012-03-27 View