tocsin

Debian/otrs2: unknown

Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a queue, which allows remote authenticated users to bypass intended access restricti

Action: Upgrade otrs2 to 2.4.5-1 or later.

Affected

introducedfixedlast affected
02.4.5-1-

Fixed versions

2.4.5-1

Sources

published · modified · JSON