ID de Prueba:	1.3.6.1.4.1.25623.1.0.805230
Categoría:	Web application abuses
Título:	OTRS Help Desk Privilege Escalation Vulnerability (Dec 2014)
Resumen:	OTRS (Open Ticket Request System) Help Desk is prone to a privilege escalation vulnerability.
Descripción:	Summary: OTRS (Open Ticket Request System) Help Desk is prone to a privilege escalation vulnerability. Vulnerability Insight: The error exists due to error in the 'GenericInterface' that is due to a lack of sufficient permission checks. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to and make changes to ticket data of other users. Affected Software/OS: OTRS Help Desk versions 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 Solution: Upgrade to OTRS Help Desk version 3.2.17 or 3.3.11 or 4.0.3 or later. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9324 http://www.mandriva.com/security/advisories?name=MDVSA-2015:043 http://secunia.com/advisories/59875 http://secunia.com/advisories/62188 http://secunia.com/advisories/62662
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.