Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2019-18179

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn't have permissions.

  • Published: Jan 6, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-18179
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
otrs / otrs 5.0.0 5.0.38.x
otrs / otrs 6.0.0 6.0.23.x
otrs / otrs 7.0.0 7.0.12.x
debian / debian_linux 8.0 8.0.x
opensuse / leap 15.1 15.1.x
opensuse / backports_sle 15.0-sp1 15.0-sp1.x
opensuse / backports_sle 15.0 15.0.x
opensuse / leap 15.2 15.2.x
opensuse / backports_sle 15.0-sp2 15.0-sp2.x