Test ID:	1.3.6.1.4.1.25623.1.0.803943
Category:	Web application abuses
Title:	OTRS Ticket Watch Security Bypass Vulnerability (OSA-2013-04)
Summary:	OTRS (Open Ticket Request System) is prone to a security bypass; vulnerability.
Description:	Summary: OTRS (Open Ticket Request System) is prone to a security bypass vulnerability. Vulnerability Insight: An error exists in application which fails properly verifying permissions when accessing tickets via the ticket watch mechanism. Vulnerability Impact: Successful exploitation will allow remote authenticated users to bypass intended security restriction and obtain sensitive information. Affected Software/OS: OTRS versions 3.0.x through 3.0.20, 3.1.x through 3.1.16 and 3.2.x through 3.2.7. Solution: Update to version 3.0.21, 3.1.17, 3.2.8 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4088 http://advisories.mageia.org/MGASA-2013-0196.html http://archives.neohapsis.com/archives/bugtraq/2013-07/0015.html https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-4088 https://www.securityfocus.com/bid/60688/discuss
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.