CVE-2014-9324
Fixed in a distro release EPSS 2%
The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors.
Products: otrs_help_desk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | otrs2 | 3.3.9-3 |
| Debian 7 | otrs2 | 3.1.7+dfsg1-8+deb7u5 |
| openSUSE Tumbleweed | otrs | 3.3.14-37.1 |