CVE-2009-5056

OTRS < 2.4.0 - Authenticated Permission Bypass via Watched Tickets List

Title source: llm
STIX 2.1

Description

Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-tickets list.

References (2)

Core 2
Core References
Exploit x_refsource_confirm
http://bugs.otrs.org/show_bug.cgi?id=3583

Scores

EPSS 0.0089
EPSS Percentile 55.2%

Details

CWE
CWE-20
Status published
Products (29)
otrs/otrs 0.5 beta1 (8 CPE variants)
otrs/otrs 1.0 rc1 (3 CPE variants)
otrs/otrs 1.0.0
otrs/otrs 1.0.1
otrs/otrs 1.0.2
otrs/otrs 1.1 rc1
otrs/otrs 1.1.0 rc1 (2 CPE variants)
otrs/otrs 1.1.1
otrs/otrs 1.1.2
otrs/otrs 1.1.3
... and 19 more
Published Mar 18, 2011
Tracked Since Feb 18, 2026