CVE-2024-43446CWE-269

Improper check of permissions in Generic Interface

Low · published January 27, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions.

This issue affects:

* OTRS 7.0.X

* OTRS 8.0.X

* OTRS 2023.X

* OTRS 2024.X

* ((OTRS)) Community Edition: 6.0.x

Products based on the ((OTRS)) Community Edition also very likely to be affected

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-01-27T05:58Z
EPSS history
Timeline
  • 27 JAN 05:58Z
    Improper check of permissions in Generic Interface
    cvelistv5