tocsin

Debian/otrs2: unknown

Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictio

Action: Upgrade otrs2 to 2.3.2-1 or later.

Affected

introducedfixedlast affected
02.3.2-1-

Fixed versions

2.3.2-1

Sources

published · modified · JSON