tocsin

Debian/otrs2: unknown

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

Action: Upgrade otrs2 to 2.2.5-2 or later.

Affected

introducedfixedlast affected
02.2.5-2-

Fixed versions

2.2.5-2

Sources

published · modified · JSON