Oval Definition:oval:org.opensuse.security:def:20134088
Revision Date:2022-06-30Version:1
Title:CVE-2013-4088
Description:

Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2013-4088
Mitre CVE-2013-4088
SUSE CVE-2013-4088
openSUSE-SU-2013:1338-1
Platform(s):openSUSE 12.2 Update
openSUSE 12.3 Update
openSUSE Tumbleweed
Product(s):
Definition Synopsis
  • otrs-3.1.18-26.5.1 is installed
  • OR otrs-doc-3.1.18-26.5.1 is installed
  • OR otrs-itsm-3.1.10-26.5.1 is installed
    • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • otrs-3.3.16-37.1 is installed
  • OR otrs-doc-3.3.16-37.1 is installed
  • OR otrs-itsm-3.3.14-37.1 is installed
    • BACK