Unscored severity · published Jul 19, 2011
CVE-2011-2385
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iphonehandle · Otrs
0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; 0.9.6; +2 more · source: NVD
OT
Otrs · Otrs
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2385
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2385
osvdb.org
http://osvdb.org/73885
Patch
http://otrs.org/advisory/OSA-2011-02-en/
Vendor Advisory
http://secunia.com/advisories/45227
www.securityfocus.com
http://www.securityfocus.com/bid/48678
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/68558