Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 4.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade otrs2 | Jul 30, 2024 | Aug 29, 2011 |
| Freebsd | — | Upgrade otrs | Dec 10, 2025 | Aug 18, 2011 |
| Suse | — | Upgrade otrsUpgrade otrs-docUpgrade otrs-itsm | Dec 12, 2013 | Aug 29, 2011 |
| Ubuntu | — | Upgrade otrs2 | Nov 19, 2024 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub