CVE-2010-4768
- Source
- https://cve.org/CVERecord?id=CVE-2010-4768
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2010-4768.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2010-4768
- Downstream
- Published
- 2011-03-18T16:55:01Z
- Modified
- 2026-04-10T03:41:33.021003Z
- Summary
- [none]
- Details
-
Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions.
- References