CVE-2008-1515

Опубликовано: 01 апр. 2008

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
Third Party Advisory
http://otrs.org/advisory/OSA-2008-01-en/
Vendor Advisory
http://secunia.com/advisories/29585
Third Party Advisory
http://secunia.com/advisories/29622
Third Party Advisory
http://secunia.com/advisories/29859
Third Party Advisory
http://www.securityfocus.com/bid/28647
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
Third Party Advisory
http://otrs.org/advisory/OSA-2008-01-en/
Vendor Advisory
http://secunia.com/advisories/29585
Third Party Advisory
http://secunia.com/advisories/29622
Third Party Advisory
http://secunia.com/advisories/29859
Third Party Advisory
http://www.securityfocus.com/bid/28647
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41577
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*

Версия от 2.1.0 (включая) до 2.1.8 (исключая)

cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.6 (исключая)

EPSS

Процентиль: 71%

0.00709

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2008-1515

ubuntu

больше 17 лет назад

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

CVE-2008-1515

debian

больше 17 лет назад

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 a ...

GHSA-c8ch-p52f-7rgj

github

больше 3 лет назад

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

EPSS

Процентиль: 71%

0.00709

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-264