CVE-2014-1694

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow remote attackers to hijack the authentication of arbitrary users for requests that (5) create tickets or (6) send follow-ups to existing tickets.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://bugs.otrs.org/show_bug.cgi?id=10099
http://osvdb.org/102632
http://secunia.com/advisories/56644	Vendor Advisory
http://secunia.com/advisories/56655	Vendor Advisory
http://www.debian.org/security/2014/dsa-2867
http://www.openwall.com/lists/oss-security/2014/01/29/15
http://www.openwall.com/lists/oss-security/2014/01/29/7
https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7	Exploit Patch
https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312	Exploit Patch
https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77	Exploit Patch
https://www.otrs.com/release-notes-otrs-help-desk-3-3-4
https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface	Patch Vendor Advisory
http://bugs.otrs.org/show_bug.cgi?id=10099
http://osvdb.org/102632
http://secunia.com/advisories/56644	Vendor Advisory
http://secunia.com/advisories/56655	Vendor Advisory
http://www.debian.org/security/2014/dsa-2867
http://www.openwall.com/lists/oss-security/2014/01/29/15
http://www.openwall.com/lists/oss-security/2014/01/29/7
https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7	Exploit Patch
https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312	Exploit Patch
https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77	Exploit Patch
https://www.otrs.com/release-notes-otrs-help-desk-3-3-4
https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:otrs:otrs:3.2.0:::::::*
	cpe:2.3:a:otrs:otrs:3.2.0:beta1::::::
	cpe:2.3:a:otrs:otrs:3.2.0:beta2::::::
	cpe:2.3:a:otrs:otrs:3.2.0:beta3::::::
	cpe:2.3:a:otrs:otrs:3.2.0:beta4::::::
	cpe:2.3:a:otrs:otrs:3.2.0:beta5::::::
	cpe:2.3:a:otrs:otrs:3.2.0:rc1::::::
	cpe:2.3:a:otrs:otrs:3.2.1:::::::*
	cpe:2.3:a:otrs:otrs:3.2.2:::::::*
	cpe:2.3:a:otrs:otrs:3.2.3:::::::*
	cpe:2.3:a:otrs:otrs:3.2.4:::::::*
	cpe:2.3:a:otrs:otrs:3.2.5:::::::*
	cpe:2.3:a:otrs:otrs:3.2.6:::::::*
	cpe:2.3:a:otrs:otrs:3.2.7:::::::*
	cpe:2.3:a:otrs:otrs:3.2.8:::::::*
	cpe:2.3:a:otrs:otrs:3.2.9:::::::*
	cpe:2.3:a:otrs:otrs:3.2.10:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:otrs:otrs:3.1.0:::::::*
	cpe:2.3:a:otrs:otrs:3.1.1:::::::*
	cpe:2.3:a:otrs:otrs:3.1.2:::::::*
	cpe:2.3:a:otrs:otrs:3.1.3:::::::*
	cpe:2.3:a:otrs:otrs:3.1.4:::::::*
	cpe:2.3:a:otrs:otrs:3.1.5:::::::*
	cpe:2.3:a:otrs:otrs:3.1.6:::::::*
	cpe:2.3:a:otrs:otrs:3.1.7:::::::*
	cpe:2.3:a:otrs:otrs:3.1.8:::::::*
	cpe:2.3:a:otrs:otrs:3.1.9:::::::*
	cpe:2.3:a:otrs:otrs:3.1.10:::::::*
	cpe:2.3:a:otrs:otrs:3.1.11:::::::*
	cpe:2.3:a:otrs:otrs:3.1.13:::::::*
	cpe:2.3:a:otrs:otrs:3.1.14:::::::*
	cpe:2.3:a:otrs:otrs:3.1.15:::::::*
	cpe:2.3:a:otrs:otrs:3.1.16:::::::*
	cpe:2.3:a:otrs:otrs:3.1.17:::::::*
	cpe:2.3:a:otrs:otrs:3.1.18:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:otrs:otrs:3.3.0:::::::*
	cpe:2.3:a:otrs:otrs:3.3.0:beta1::::::
	cpe:2.3:a:otrs:otrs:3.3.0:beta2::::::
	cpe:2.3:a:otrs:otrs:3.3.0:beta3::::::
	cpe:2.3:a:otrs:otrs:3.3.0:beta4::::::
	cpe:2.3:a:otrs:otrs:3.3.0:beta5::::::
	cpe:2.3:a:otrs:otrs:3.3.0:rc1::::::
	cpe:2.3:a:otrs:otrs:3.3.1:::::::*
	cpe:2.3:a:otrs:otrs:3.3.2:::::::*
	cpe:2.3:a:otrs:otrs:3.3.3:::::::*

History

21 Nov 2024, 02:04

Type	Values Removed	Values Added
References	~~() http://bugs.otrs.org/show_bug.cgi?id=10099 -~~	() http://bugs.otrs.org/show_bug.cgi?id=10099 -
References	~~() http://osvdb.org/102632 -~~	() http://osvdb.org/102632 -
References	~~() http://secunia.com/advisories/56644 - Vendor Advisory~~	() http://secunia.com/advisories/56644 - Vendor Advisory
References	~~() http://secunia.com/advisories/56655 - Vendor Advisory~~	() http://secunia.com/advisories/56655 - Vendor Advisory
References	~~() http://www.debian.org/security/2014/dsa-2867 -~~	() http://www.debian.org/security/2014/dsa-2867 -
References	~~() http://www.openwall.com/lists/oss-security/2014/01/29/15 -~~	() http://www.openwall.com/lists/oss-security/2014/01/29/15 -
References	~~() http://www.openwall.com/lists/oss-security/2014/01/29/7 -~~	() http://www.openwall.com/lists/oss-security/2014/01/29/7 -
References	~~() https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7 - Exploit, Patch~~	() https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7 - Exploit, Patch
References	~~() https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312 - Exploit, Patch~~	() https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312 - Exploit, Patch
References	~~() https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77 - Exploit, Patch~~	() https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77 - Exploit, Patch
References	~~() https://www.otrs.com/release-notes-otrs-help-desk-3-3-4 -~~	() https://www.otrs.com/release-notes-otrs-help-desk-3-3-4 -
References	~~() https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface - Patch, Vendor Advisory~~	() https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface - Patch, Vendor Advisory

Information

Published : 2014-02-04 21:55

Updated : 2025-04-11 00:51

NVD link : CVE-2014-1694

Mitre link : CVE-2014-1694

CVE.ORG link : CVE-2014-1694

JSON object : View

Products Affected

otrs

otrs

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2014-1694", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-02-04T21:55:05.640", "references": [{"url": "http://bugs.otrs.org/show_bug.cgi?id=10099", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/102632", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/56644", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/56655", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2014/dsa-2867", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2014/01/29/15", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2014/01/29/7", "source": "cve@mitre.org"}, {"url": "https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "https://www.otrs.com/release-notes-otrs-help-desk-3-3-4", "source": "cve@mitre.org"}, {"url": "https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://bugs.otrs.org/show_bug.cgi?id=10099", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/102632", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/56644", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/56655", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2014/dsa-2867", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2014/01/29/15", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2014/01/29/7", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7", "tags": ["Exploit", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312", "tags": ["Exploit", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77", "tags": ["Exploit", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.otrs.com/release-notes-otrs-help-desk-3-3-4", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow remote attackers to hijack the authentication of arbitrary users for requests that (5) create tickets or (6) send follow-ups to existing tickets."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de CSRF en (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm y (4) CustomerTicketZoom.pm en Kernel/Modules/ en Open Ticket Request System (OTRS) 3.1.x anterior a 3.1.19, 3.2.x anterior a 3.2.14 y 3.3.x anterior a 3.3.4 permite a atacantes remotos secuestrar la auntenticaci\u00f3n de usuarios arbitrarios para solicitudes que (5) crean tickets o (6) env\u00edan seguimientos a tickets existentes."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2206E940-7C63-43A5-A041-CA13A84312A4"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB051883-3917-414F-8A36-B51E833451E7"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "445641C8-5D1E-463E-8C00-1CD4E18B2B5E"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24C72855-1DF6-4456-A68A-89458C2EA7D1"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A84F186F-D5F9-4968-BA39-2B44FFD2119F"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:beta5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F58F68B-CCB5-408B-A721-05E355E9A2EA"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C41A2AB-BED9-4185-A71B-23F6CF101DA9"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EADC2C11-F0BB-4763-9B7D-D8ACCD259DA1"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BF18770-E861-4689-9040-A6E4BCB03D88"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77E1C1A9-4835-467D-8FA9-D93814634476"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "097B8F4A-66E7-46E9-B624-EA26F8687181"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B223E5A-9A4B-466B-BC0F-4C0400E70E64"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A30D8237-63CD-4075-B533-3E537A5B0D42"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8821F99A-24D8-483E-AD56-AA5D34BF47FF"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0B6966E-47DA-4852-87E0-E768CCE07012"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F638AF98-56CC-44A3-94E7-B7CCBAAFCE8F"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F52F5362-FFE8-49F4-97A9-2BE4D855AF3A"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:otrs:otrs:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55EB05A1-9965-40D2-BABF-A666BE857166"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "777A992E-1D05-493F-8E2F-15AB3F2A4562"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "828189F1-EF8B-485C-946F-C12CCEE4E27D"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D8020EA-A636-4C9B-A080-3EF092DF583B"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C3C84E0-F4C1-4BDC-B7C1-519C4499FEC5"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51877344-2358-400D-89D5-6273992571FC"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FC3B407-4C93-422F-800B-E747068826E8"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A10F00-2869-4DDE-9548-B374EBC14C12"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BF985A8-DB88-47DA-9F9A-B63F727D8239"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A1D5FC4-BDFC-4D46-B722-8BFAC91C819F"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5189FACC-454A-4AFD-A08C-0F4F7158EDEB"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5959FA82-043D-42A6-BB7A-C4D37350C5C9"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7DC1416-3EBF-4FA9-9A4E-0737BFFD4DA1"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B30DBAFD-3213-4473-8F3A-783035D6ED9A"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1729DB9-48DB-49D5-8F81-567D01B91866"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB3AF271-B4CA-4217-A96A-835133AF517B"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDF17BC5-DEB1-47A1-9734-14F56F0B8DDB"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.1.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9A73332-DDB0-4C16-BB5B-4C4A3F90BF8C"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B4C9653-D2B6-4A2E-A1E3-59D9E47D4F4D"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F950A3B9-9347-4271-9AE2-816BB37F2FF2"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78F12260-F695-492E-9F93-34873E8CD42B"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CFBFFA0-A57E-44A8-9D37-25AD4D0D36F1"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2ACF399-6BD0-4753-A8FA-A7031C5E898D"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:beta5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E314819D-7CF9-4DCC-8007-CFE73F3138A3"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D286118-DA1F-43A4-9B0B-9A340887EA88"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82E2C445-2CC0-4F4E-BF4E-C2987E273448"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAB02A9C-AE23-4DF6-88E7-A606A3483036"}, {"criteria": "cpe:2.3:a:otrs:otrs:3.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1AEB95F-BF0E-42DE-BB47-3CB10BB27DA7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

6.8 /10