CVE-2011-2385

Published: Jul 19, 2011Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

Affected (9)

Products: Otrs: Iphonehandle, Otrs

Otrs

2 products

Iphonehandle

Otrs

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Otrs Iphonehandle	Version 0.9.1
Otrs Iphonehandle	Version 0.9.2
Otrs Iphonehandle	Version 0.9.3
Otrs Iphonehandle	Version 0.9.4
Otrs Iphonehandle	Version 0.9.5
Otrs Iphonehandle	Version 0.9.6
Otrs Iphonehandle	Version 1.0.1
Otrs Iphonehandle	Version 1.0.2
Otrs Otrs	All versions