CVE-2008-1515

Description

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

References

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/41577

http://www.securityfocus.com/bid/28647

http://secunia.com/advisories/29859

http://secunia.com/advisories/29622

http://secunia.com/advisories/29585

http://otrs.org/advisory/OSA-2008-01-en/

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3