CVE-2011-2385

2011-07-1920:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.