CVE-2008-1515: The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

Unscored severity · published Apr 1, 2008

CVE-2008-1515

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

–

CVSS

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)2.0% · higher than 81% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Otrs · Otrs

2.1.0 before 2.1.8; 2.2.0 before 2.2.6 · source: NVD

Affected product

Otrs

All Otrs CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2008-1515

CVE.org

https://www.cve.org/CVERecord?id=CVE-2008-1515

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html

Vendor Advisory

http://otrs.org/advisory/OSA-2008-01-en/

Third Party Advisory

http://secunia.com/advisories/29585

Third Party Advisory

http://secunia.com/advisories/29622

Third Party Advisory

http://secunia.com/advisories/29859

Third Party Advisory

http://www.securityfocus.com/bid/28647