tocsin

Debian/otrs2: unknown

Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authen

Action: Upgrade otrs2 to 2.3.2-1 or later.

Affected

introducedfixedlast affected
02.3.2-1-

Fixed versions

2.3.2-1

Sources

published · modified · JSON