Debian/otrs2: unknown
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."
Action: Upgrade otrs2 to 2.2.5-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.5-2 | - |
Fixed versions
| 2.2.5-2 |
Sources
published · modified · JSON