CVE-2008-1515

Published: 1 April 2008

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

Notes

otrs 1.x and 2.0.x not affected

Status

References

• http://otrs.org/advisory/OSA-2008-01-en/
• https://www.cve.org/CVERecord?id=CVE-2008-1515
• NVD
• Launchpad
• Debian

Bugs

• https://bugs.launchpad.net/ubuntu/+source/otrs2/+bug/214993