In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.

Four vulnerabilities were discovered in the Open Ticket Request System which could result in information disclosure or the execution of arbitrary shell commands by logged-in agents.

For Debian 7 'Wheezy', these problems have been fixed in version 3.3.18-1~deb7u2.

We recommend that you upgrade your otrs2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for otrs fixes the following security issues :

  - CVE-2017-15864: Remote authenticated attackers could     have caused otrs to disclose configuration information,     including database credentials (boo#1068677,     OSA-2017-06)

  - CVE-2017-16664: Remote authenticated attackers could     have caused the execution of shell commands with the     permission of the web server user (boo#1069391,     OSA-2017-07)

Two vulnerabilities were discovered in the Open Ticket Request System which could result in disclosure of database credentials or the execution of arbitrary shell commands by logged-in agents.

ID	Name	Product	Family	Severity
105378	Debian DLA-1212-1 : otrs2 security update	Nessus	Debian Local Security Checks	high
104763	openSUSE Security Update : otrs (openSUSE-2017-1291)	Nessus	SuSE Local Security Checks	high
104753	Debian DSA-4047-1 : otrs2 - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-15864

high

Tenable Plugins

high

high

high