CVE-2013-2625
Fixed in a distro release EPSS 1%
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified
Products: otrs faq, otrs_help_desk, otrs_itsm, debian_linux, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | otrs2 | 3.1.7+dfsg1-8 |
| openSUSE Tumbleweed | otrs | 3.3.14-37.1 |