Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2385HistoryJul 19, 2011 - 8:55 p.m.
CVE-2011-2385
2011-07-1920:55:01
Debian Security Bug Tracker
security-tracker.debian.org
9
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.003
Percentile
70.6%
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | otrs2 | < 6.0.32-6 | otrs2_6.0.32-6_all.deb |
Related
prion
prion
Authentication flaw
2011-07-19 20:55:00
cvelist
cvelist
CVE-2011-2385
2011-07-19 20:00:00
nvd
nvd
CVE-2011-2385
2011-07-19 20:55:01
cve
cve
CVE-2011-2385
2011-07-19 20:55:01
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.003
Percentile
70.6%
Related for DEBIANCVE:CVE-2011-2385