CVE-2009-5055
- Source
- https://cve.org/CVERecord?id=CVE-2009-5055
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-5055.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2009-5055
- Downstream
- Published
- 2011-03-18T16:55:01Z
- Modified
- 2026-04-10T03:41:04.535835Z
- Summary
- [none]
- Details
-
Open Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the CustomerID 12 account to read tickets that should be available only to CustomerID 1 or CustomerID 2.
- References