CVE-2017-14635

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-14635

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-14635.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2017-14635

Related

Published

2017-09-21T13:29:00Z

Modified

2025-01-08T04:35:22.190851Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

References

Affected packages

Debian:11 / otrs2

Package

Name: otrs2
Purl: pkg:deb/debian/otrs2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.0.23-1

Affected versions

2.*

2.0.4p01-6

2.0.4p01-7

2.0.4p01-8

2.0.4p01-9

2.0.4p01-10

2.0.4p01-11

2.0.4p01-12

2.0.4p01-13

2.0.4p01-14

2.0.4p01-14.1

2.0.4p01-15

2.0.4p01-16

2.0.4p01-17

2.0.4p01-18

2.0.99beta1-1

2.0.99beta1-2

2.1.1-1

2.1.3-1

2.1.4-1

2.1.4-2

2.1.5-1

2.1.5-2

2.1.5-3

2.1.6-1

2.1.7-1

2.1.7-2

2.2.0~beta2-1

2.2.0~beta3-1

2.2.1-1

2.2.2-1

2.2.3-1

2.2.4-1

2.2.5-1

2.2.5-2

2.2.6-1

2.2.7-1

2.2.7-2

2.2.7-2lenny1

2.2.7-2lenny2

2.2.7-2lenny3

2.2.7-3

2.3.2-1

2.3.2-2

2.3.3-1

2.3.4-1

2.3.4-2

2.3.4-3

2.3.4-4

2.3.4-5

2.3.4-6

2.3.4-7

2.4.5-1

2.4.5-2

2.4.5-3

2.4.5-4

2.4.5-5

2.4.6-1

2.4.6-2

2.4.7-1

2.4.7-2

2.4.7-3

2.4.7-4

2.4.7-5

2.4.7-6

2.4.7+dfsg1-1

2.4.8+dfsg1-1

2.4.9+dfsg1-1

2.4.9+dfsg1-2

2.4.9+dfsg1-3

2.4.9+dfsg1-3+squeeze1

2.4.9+dfsg1-3+squeeze3

2.4.9+dfsg1-3+squeeze4

2.4.9+dfsg1-3+squeeze5

2.4.9+dfsg1-4

2.4.9+dfsg1-5

2.4.10+dfsg1-1

2.4.10+dfsg1-2

2.4.10+dfsg1-3

3.*

3.0.8+dfsg1-1

3.0.9+dfsg1-1

3.0.10+dfsg1-1

3.0.10+dfsg1-2

3.0.11+dfsg1-1

3.1.0~beta4+dfsg1-1

3.1.0~beta5+dfsg1-1

3.1.0~rc1+dfsg1-1

3.1.1+dfsg1-1

3.1.1+dfsg1-2

3.1.2+dfsg1-1

3.1.2+dfsg1-2

3.1.2+dfsg1-3

3.1.3+dfsg1-1

3.1.3+dfsg1-2

3.1.4+dfsg1-1

3.1.5+dfsg1-1

3.1.5+dfsg1-2

3.1.5+dfsg1-3

3.1.6+dfsg1-1

3.1.7+dfsg1-1

3.1.7+dfsg1-2

3.1.7+dfsg1-3

3.1.7+dfsg1-4

3.1.7+dfsg1-5

3.1.7+dfsg1-6

3.1.7+dfsg1-7

3.1.7+dfsg1-8

3.1.8+dfsg1-1

3.1.9+dfsg1-1

3.1.10+dfsg1-1

3.1.11+dfsg1-1

3.1.12+dfsg1-1

3.1.12+dfsg1-2

3.1.12+dfsg1-3

3.2.1+dfsg1-1

3.2.2+dfsg1-1

3.2.3+dfsg1-1

3.2.4-1

3.2.5-1

3.2.6-1

3.2.6-2

3.2.7-1

3.2.7-2

3.2.8-1

3.2.9-1

3.2.9-2

3.2.10-1

3.2.10-2

3.2.11-1~bpo70+1

3.2.11-1

3.2.12-1

3.3.1-1

3.3.2-1

3.3.3-1

3.3.3-2

3.3.3-3

3.3.4-1

3.3.5-1

3.3.6-1

3.3.7-1

3.3.7-2

3.3.8-1

3.3.9-1

3.3.9-2

3.3.9-3~bpo70+1

3.3.9-3

3.3.10-1

3.3.11-1

3.3.18-1~deb7u1

3.3.18-1~deb7u2

3.3.18-1~deb7u3

4.*

4.0.5-1

4.0.5-2

4.0.6-1

4.0.7-1

4.0.7-2

4.0.8-1

4.0.9-1

4.0.10-1

4.0.11-1

4.0.12-1

4.0.13-1~bpo8+1

4.0.13-1

5.*

5.0.1-1

5.0.1-2

5.0.2-1

5.0.3-1

5.0.5-1

5.0.6-1~bpo8+1

5.0.6-1

5.0.7-1

5.0.8-1~bpo8+1

5.0.8-1

5.0.8+dfsg1-1

5.0.9+dfsg1-1

5.0.9+repack1-1

5.0.10-1~bpo8+1

5.0.10-1

5.0.11-1

5.0.12-1

5.0.13-1~bpo8+1

5.0.13-1

5.0.13-2

5.0.14-1~bpo8+1

5.0.14-1

5.0.15-1

5.0.16-1~bpo8+1

5.0.16-1

5.0.17-1

5.0.18-1

5.0.19-1

5.0.20-1

5.0.21-1~bpo9+1

5.0.21-1

5.0.22-1

5.0.23-1~bpo9+1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/otrs/otrs

Affected ranges

Type: GIT
Repo: https://github.com/otrs/otrs
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

00575bc914a2968158c78bd5ef4bc619cd50ddbc

Last affected

06c84ef205b02fa4ad8cf207320eeea55e8fb75b

Last affected

0761978a5771fdab9ea90e0d81c4c10f59aef68a

Last affected

0bab35dfbb793f7e6b5639da43dfaa09f2ee3401

Last affected

0cd22dd33cdd51d6fac4c997c2aeb68a8e899134

Last affected

0f77f00d00ab28ff64bf39a42d3dfe43e249d668

Last affected

147706eb87635b475f77a760d12da2eaaa939112

Last affected

1534f33689b3fb3c738ff391c9ee464525ade5b9

Last affected

17047f295a7df6fbe274e605716cfdcd86e78ffe

Last affected

1f4cd0867f7a590555d795e8f0b5158d273651ab

Last affected

1faee760c8bb462fc7a00815a28e17a1c6bcc7f9

Last affected

20409dde9052130c9a14803dd5cfeb621fb5eee2

Last affected

22471afef549699d0d9153aeb02adc9d8794d877

Last affected

28a64bf927e4d521e9d36bdd5eeb1ef6ca090d15

Last affected

2a5ae4549f74f20152739a58e583771c4432ea27

Last affected

2dfab920129d08bf4c5ccf0a3a311e7cab272200

Last affected

3386c8868dff5e49dd1ab9557ee7491d04182be8

Last affected

38e031d2e266dc5af4fad325c7b79aa9485db0d1

Last affected

416e63feb47b8887a8d77b6f7485ce8e422dfdab

Last affected

42e4a7ed5e4520233abc84b081a7d6aaa16d96ea

Last affected

45ab658976dcca7e9c87ceaa71af9fc972f62d20

Last affected

45e2ba3e67798928a28619bfe6a91b983eb2cf7e

Last affected

4616595618dcb7cc05a474fe9d5b74c30d49b96e

Last affected

478ee665c535b68029ced4dca197b5235b7b192f

Last affected

4a4913138c7dfcc8f51b83e015e3685d3cfc2838

Last affected

4cb9487912ec1c6c26c62a4521798d523a1be07c

Last affected

4e6da6e3b0aa6300c56e4dfc2bc3255988fde969

Last affected

59b19227f097da2b0aa8b9f855fc0cd58e5a8fc8

Last affected

6bd226a73fc6977d0e241bf20ca84957392c4fb6

Last affected

745edd2e5c2ca7b5045b6197b2c33cb2e5e27030

Last affected

7548714330c00fa33a4397a615596601a772d70b

Last affected

77149f6f5210094eff910cfea2f6009f603221ce

Last affected

7fd2d1a6861a0c21ee62ce09493f988698b6ce75

Last affected

84734ddd7c24b8c487a8de4f9db899cabb96f1ca

Last affected

85b1d64a2f5f4a4310a1138f71e6f880846bdfc8

Last affected

891542dc03040c2134c615fccd9a8d1db0fd5132

Last affected

8ef28d3047ab9b14ce1261ab65bae39580a137ec

Last affected

8ef8253b90343bc1ade6b82ffec49eae8b26e6cf

Last affected

9094a8d778f11151d4723028cb9a7d2d0edaa485

Last affected

9324fc9cd8fad78b5650d96fa4b43d931735b594

Last affected

986a88ab583d6b122d93c0fb9ccc354d74f28fc7

Last affected

989b652465d37728dde43c8dc9af879309b9b3ba

Last affected

9a271a4619cfa1e42e525166e76ce803cabf0fd5

Last affected

9a7c9caafa445953b2ed0171bc1e7122f100ff00

Last affected

9b8be6ffdb39ef19631620d0fbcf117758b23767

Last affected

a19579035951baf7dcafd85b0ae37c6127961eb7

Last affected

a6f8fd7a077e149860f02e9ad981ca32508dd9b8

Last affected

a72b1de7083f34e882528890ed95292ef3196e78

Last affected

a9bb853ee39313a6498ab0ddf65d63f4e203980f

Last affected

b1a858c964dabccfe23b0ff574678ac401c2b4b2

Last affected

b3b14d6a8d857cf399dc49cd5b0353c28e6fb41a

Last affected

b45125e99a04f44b926cea35d167f16aa3a1fe7d

Last affected

b5b0ed3d011b0433ec62e1f97a4c9044d59526b9

Last affected

b6ea1be5ddbfb2a02b8e3ad0aa2e20ee97b4f1d5

Last affected

be65d60b7254415e310823b768d158beab6c5f4a

Last affected

bf739da6044757eb10465eb4a023af1b235128fe

Last affected

c51846e3c497e294ddfcec9c2c66209c51de9b84

Last affected

c6bab21214bdfcd834d032e095477e98ec2f09c4

Last affected

cb0a059b016c078ba0eadfe094589f04090cce00

Last affected

cf2549fb3eaddb6ff43c0815fe9bdd8a70f84834

Last affected

d2d97b402c118f478778d9a422a313146b53eabd

Last affected

d39d62cd2bdb9b9a1bc84277916509afa3a0ded6

Last affected

d8999a54e52ad7aa2b11d272ec42a6d8ecffe9e3

Last affected

dbbbb26c648ce451fb9d387814931716d6224bd6

Last affected

df502a05e455299f35e37c497536501164ab31ec

Last affected

dfd78009b7055053756d66f017369550ea271189

Last affected

e5c7d6f5f66e5780c51cc48bbc2fb92ad46f39d0

Last affected

e5f02cee45667ebd150eab68ad59ce164e491ef0

Last affected

e5fe8740403fd6bfe49bd0f202f5765bec1140c4

Last affected

e681ed60e2a4e82b4106572c7846602a8280f783

Last affected

ea482367f8cefe53447030ed80a2a67316d5c36b

Last affected

edabf58e7c0a4c33214a6dc17f6877d7276853b1

Last affected

eddbe8abd8999b1304017af9b67a11a35010ed2f

Last affected

f1fa9cd8abca1e4099d896dbe9304b22fff6ad95

Last affected

f2213b952ab6f674c14e99cb1904070141bed145

Last affected

f3d19540a68263d297d52bda1f62ff2f4b7edd5b

Last affected

f545605be7e75fd2a34cd24e18bb2e18a2f61152

Last affected

f824f5aff74bb0929b645f95963dd51b829042a5

Last affected

fabcf43eae2a1903cb2c52c17152f6d95573ee8a

Last affected

fb31bdbee3247e133b75bd08f93bd4fca2de946b

Last affected

fe0ba4e3501993d0bd62f0c5fae0311f1d5e4f93

Affected versions

Other

rel-1_0_0-RC1

rel-1_0_0-RC2

rel-1_0_0-RC3

rel-1_0_0_rc1

rel-1_0_0_rc2

rel-1_0_0_rc3

rel-1_1_0-RC1

rel-1_1_0-RC2

rel-1_1_0_rc1

rel-1_1_0_rc2

rel-1_2_0-b1

rel-1_2_0-b2

rel-1_2_0-b3

rel-1_2_0_beta1

rel-1_2_0_beta2

rel-1_2_0_beta3

rel-1_2_1

rel-2_0_0-b1

rel-2_0_0_beta1

rel-2_0_1

rel-2_0_2

rel-2_0_3

rel-2_1_0-b1

rel-2_1_0-b2

rel-2_1_0_beta1

rel-2_1_0_beta2

rel-2_1_1

rel-2_1_2

rel-2_1_3

rel-2_2_0-b1

rel-2_2_0-b2

rel-2_2_0-b3

rel-2_2_0-b4

rel-2_2_0_beta1

rel-2_2_0_beta2

rel-2_2_0_beta3

rel-2_2_0_beta4

rel-2_2_1

rel-2_2_2

rel-2_3_1

rel-2_3_2

rel-2_4_0-b2

rel-2_4_0-b3

rel-2_4_0-b4

rel-2_4_0-b6

rel-2_4_0_beta2

rel-2_4_0_beta3

rel-2_4_0_beta4

rel-2_4_0_beta6

rel-2_4_1

rel-2_4_2

rel-2_4_3

rel-2_4_4

rel-3_0_0-b2

rel-3_0_0-b3

rel-3_0_0-b4

rel-3_0_0-b5

rel-3_0_0-b7

rel-3_0_0_beta2

rel-3_0_0_beta3

rel-3_0_0_beta4

rel-3_0_0_beta5

rel-3_0_0_beta7

rel-3_0_1

rel-3_0_2

rel-3_0_3

rel-3_0_4

rel-3_1_0-b1

rel-3_1_0-b3

rel-3_1_0-b4

rel-3_1_0-b5

rel-3_1_0-rc1

rel-3_1_0_beta1

rel-3_1_0_beta3

rel-3_1_0_beta4

rel-3_1_0_beta5

rel-3_1_0_rc1

rel-3_1_2

rel-3_1_4

rel-3_2_0_beta1

rel-3_2_0_beta2

rel-3_2_0_beta3

rel-3_2_0_beta4

rel-3_2_0_beta5

rel-3_2_0_rc1

rel-3_2_1

rel-3_2_2

rel-3_2_3

rel-3_2_4

rel-3_3_0_beta1

rel-3_3_0_beta2

rel-3_3_0_beta3

rel-3_3_0_beta4

rel-3_3_0_beta5

rel-3_3_0_rc1

rel-3_3_1

rel-4_0_0_beta1

rel-4_0_0_beta2

rel-4_0_0_beta3

rel-4_0_0_beta4

rel-4_0_0_beta5

rel-4_0_0_rc1

rel-4_0_1

rel-4_0_2

rel-4_0_3

rel-4_0_4

rel-4_0_5

rel-4_0_6

rel-4_0_7

rel-5_0_0_alpha1

rel-5_0_0_beta1

rel-5_0_0_beta2

rel-5_0_0_beta3

rel-5_0_0_beta4

rel-5_0_0_beta5

rel-5_0_0_rc1