Vulnerability Name:

CVE-2014-1471 (CCN-90861)

Assigned:2014-01-28
Published:2014-01-28
Updated:2016-06-02
Summary:SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows remote attackers to execute arbitrary SQL commands via vectors related to a ticket search URL.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-89
Vulnerability Consequences:Data Manipulation
References:Source: MITRE
Type: CNA
CVE-2014-1471

Source: OSVDB
Type: UNKNOWN
102661

Source: CCN
Type: SA56644
OTRS Help Desk Cross-Site Request Forgery and SQL Injection Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
56644

Source: CCN
Type: SA56655
OTRS Cross-Site Request Forgery and SQL Injection Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
56655

Source: DEBIAN
Type: UNKNOWN
DSA-2867

Source: MLIST
Type: UNKNOWN
[oss-security] 20140129 Re: CVE Request: otrs: CSRF issue in customer web interface

Source: BID
Type: UNKNOWN
65241

Source: CCN
Type: BID-65241
OTRS CVE-2014-1471 Unspecified SQL Injection Vulnerabilitiy

Source: XF
Type: UNKNOWN
otrs-cve20141471-sql-injection(90861)

Source: CONFIRM
Type: Patch
https://github.com/OTRS/otrs/commit/0680603a07b8dc37c2ddca6ff14e0236babefc82

Source: CONFIRM
Type: Patch
https://github.com/OTRS/otrs/commit/2997b36a7c84e933c4b025930cabe93efc4d261d

Source: CONFIRM
Type: Patch
https://github.com/OTRS/otrs/commit/c4ec9205bde9c49770ddad94c1a980c006164949

Source: CONFIRM
Type: UNKNOWN
https://www.otrs.com/release-notes-otrs-help-desk-3-3-4

Source: CONFIRM
Type: Patch, Vendor Advisory
https://www.otrs.com/security-advisory-2014-02-sql-injection-issue

Source: CCN
Type: OTRS Security Advisory 2014-02
SQL injection issue

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-1471

Vulnerable Configuration:Configuration 1:
  • cpe:/a:otrs:otrs:3.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.0:beta5:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.3.3:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:otrs:otrs:3.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.0:beta5:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.6:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.7:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.8:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.9:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.2.10:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/a:otrs:otrs:3.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.8:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.9:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.10:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.11:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.13:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.14:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.15:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.16:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.17:*:*:*:*:*:*:*
  • OR cpe:/a:otrs:otrs:3.1.18:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:23788
    P
    		DSA-2867-1 otrs2 - several
    2014-07-21
    oval:com.ubuntu.precise:def:20141471000
    V
    		CVE-2014-1471 on Ubuntu 12.04 LTS (precise) - medium.
    2014-02-04
    oval:com.ubuntu.xenial:def:201414710000000
    V
    		CVE-2014-1471 on Ubuntu 16.04 LTS (xenial) - medium.
    2014-02-04
    oval:com.ubuntu.trusty:def:20141471000
    V
    		CVE-2014-1471 on Ubuntu 14.04 LTS (trusty) - medium.
    2014-02-04
    oval:com.ubuntu.xenial:def:20141471000
    V
    		CVE-2014-1471 on Ubuntu 16.04 LTS (xenial) - medium.
    2014-02-04
    BACK
    otrs otrs 3.3.0
    otrs otrs 3.3.0 beta1
    otrs otrs 3.3.0 beta2
    otrs otrs 3.3.0 beta3
    otrs otrs 3.3.0 beta4
    otrs otrs 3.3.0 beta5
    otrs otrs 3.3.0 rc1
    otrs otrs 3.3.1
    otrs otrs 3.3.2
    otrs otrs 3.3.3
    otrs otrs 3.2.0
    otrs otrs 3.2.0 beta1
    otrs otrs 3.2.0 beta2
    otrs otrs 3.2.0 beta3
    otrs otrs 3.2.0 beta4
    otrs otrs 3.2.0 beta5
    otrs otrs 3.2.0 rc1
    otrs otrs 3.2.1
    otrs otrs 3.2.2
    otrs otrs 3.2.3
    otrs otrs 3.2.4
    otrs otrs 3.2.5
    otrs otrs 3.2.6
    otrs otrs 3.2.7
    otrs otrs 3.2.8
    otrs otrs 3.2.9
    otrs otrs 3.2.10
    otrs otrs 3.1.0
    otrs otrs 3.1.1
    otrs otrs 3.1.2
    otrs otrs 3.1.3
    otrs otrs 3.1.4
    otrs otrs 3.1.5
    otrs otrs 3.1.6
    otrs otrs 3.1.7
    otrs otrs 3.1.8
    otrs otrs 3.1.9
    otrs otrs 3.1.10
    otrs otrs 3.1.11
    otrs otrs 3.1.13
    otrs otrs 3.1.14
    otrs otrs 3.1.15
    otrs otrs 3.1.16
    otrs otrs 3.1.17
    otrs otrs 3.1.18