CVE-2014-9324 – Debian Security Advisory 3124-1

https://notcve.org/view.php?id=CVE-2014-9324

19 Dec 2014 — The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors. GenericInterface en OTRS Help Desk 3.2.x anterior a 3.2.17, 3.3.x anterior a 3.3.11 y 4.0.x anterior a 4.0.3 permiten a usuarios remotos autenticados acceder y modificar tickets arbitrarios a través de vectores sin especificar. Thorsten Eckel of Znuny GMBH and Remo Staeuble of InfoGuard discovered a privilege... • http://advisories.mageia.org/MGASA-2015-0031.html • CWE-264: Permissions, Privileges, and Access Controls •