FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OTRS -- Vulnerabilities in OTRS-Core allows read access to any file on local file system

Affected packages
2.1.*	<	otrs	<	3.0.10

Details

VuXML ID	86baa0d4-c997-11e0-8a8e-00151735203a
Discovery	2011-08-16
Entry	2011-08-18

OTRS Security Advisory reports:

An attacker with valid session and admin permissions could get read access to any file on the servers local operating system. For this it would be needed minimum one installed OTRS package.

[source]

References

CVE Name	CVE-2011-2746
URL	http://otrs.org/advisory/OSA-2011-03-en/