MGASA-2013-0196
- Source
- https://advisories.mageia.org/MGASA-2013-0196.html
- Import Source
- https://advisories.mageia.org/MGASA-2013-0196.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2013-0196
- Related
- Published
- 2013-07-01T19:16:22Z
- Modified
- 2013-07-01T19:16:15Z
- Summary
- Updated otrs package fixes security vulnerabilities
- Details
-
An attacker with a valid agent login could manipulate URLs in the ticket watch mechanism to see contents of tickets they are not permitted to see (CVE-2013-3551, CVE-2013-4088).
- References
-
- https://advisories.mageia.org/MGASA-2013-0196.html
- https://bugs.mageia.org/show_bug.cgi?id=10352
- http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2013-03/
- http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2013-04/
- http://www.debian.org/security/2013/dsa-2696
- http://www.debian.org/security/2013/dsa-2712
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:2 / otrs
Package
- Name
- otrs
- Purl
- pkg:rpm/mageia/otrs?arch=source&distro=mageia-2
Mageia:3 / otrs
Package
- Name
- otrs
- Purl
- pkg:rpm/mageia/otrs?arch=source&distro=mageia-3