CVE-2014-9324

The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors.

Published: Dec 19, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-9324
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6
AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
otrs / otrs_help_desk	3.3.5	3.3.5.x
otrs / otrs_help_desk	3.2.8	3.2.8.x
otrs / otrs_help_desk	3.3.0	3.3.0.x
otrs / otrs_help_desk	3.2.12	3.2.12.x
otrs / otrs_help_desk	3.2.6	3.2.6.x
otrs / otrs_help_desk	3.2.5	3.2.5.x
otrs / otrs_help_desk	3.3.2	3.3.2.x
otrs / otrs_help_desk	3.2.0	3.2.0.x
otrs / otrs_help_desk	3.2.2	3.2.2.x
otrs / otrs_help_desk	3.2.3	3.2.3.x
otrs / otrs_help_desk	3.2.14	3.2.14.x
otrs / otrs_help_desk	4.0.1	4.0.1.x
otrs / otrs_help_desk	3.3.10	3.3.10.x
otrs / otrs_help_desk	3.2.9	3.2.9.x
otrs / otrs_help_desk	3.3.3	3.3.3.x
otrs / otrs_help_desk	3.2.15	3.2.15.x
otrs / otrs_help_desk	3.2.4	3.2.4.x
otrs / otrs_help_desk	3.2.10	3.2.10.x
otrs / otrs_help_desk	3.3.8	3.3.8.x
otrs / otrs_help_desk	3.2.16	3.2.16.x
otrs / otrs_help_desk	3.3.9	3.3.9.x
otrs / otrs_help_desk	3.3.6	3.3.6.x
otrs / otrs_help_desk	3.2.11	3.2.11.x
otrs / otrs_help_desk	3.3.4	3.3.4.x
otrs / otrs_help_desk	3.2.13	3.2.13.x
otrs / otrs_help_desk	3.2.1	3.2.1.x
otrs / otrs_help_desk	3.3.7	3.3.7.x
otrs / otrs_help_desk	4.0.2	4.0.2.x
otrs / otrs_help_desk	3.3.1	3.3.1.x
otrs / otrs_help_desk	4.0.0	4.0.0.x
otrs / otrs_help_desk	3.2.7	3.2.7.x

Vulnerability Database

CVE-2014-9324

Deep Security Visibility Without the Complexity