An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28,     and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by     accessing a specially crafted URL. (CVE-2018-14593)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for otrs to version 4.0.32 fixes the following issues :

These security issues were fixed :

  - CVE-2018-16586: An attacker could have sent a malicious     email to an OTRS system. If a logged in user opens it,     the email could have caused the browser to load external     image or CSS resources (bsc#1109822).

  - CVE-2018-16587: An attacker could have sent a malicious     email to an OTRS system. If a user with admin     permissions opens it, it caused deletions of arbitrary     files that the OTRS web server user has write access to     (bsc#1109823).

  - CVE-2018-14593: An attacker who is logged into OTRS as     an agent may have escalated their privileges by     accessing a specially crafted URL (bsc#1103800).

These non-security issues were fixed :

  - fixed permissions file @OTRS_ROOT@/var/tmp ->     @OTRS_ROOT@/var/tmp/

  - ACL for Action AgentTicketBulk were inconsistent.

Three vulnerabilities were discovered in the Open Ticket Request System which could result in privilege escalation or denial of service.

Francesco Sirocco discovered a privilege escalation flaw in otrs2, the Open Ticket Request System. An attacker who is logged into OTRS as a user may escalate their privileges by accessing a specially crafted URL.

For Debian 8 'Jessie', this problem has been fixed in version 3.3.18-1+deb8u5.

We recommend that you upgrade your otrs2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
254260	Linux Distros Unpatched Vulnerability : CVE-2018-14593	Nessus	Misc.	high
123320	openSUSE Security Update : otrs (openSUSE-2019-748)	Nessus	SuSE Local Security Checks	high
118099	Debian DSA-4317-1 : otrs2 - security update	Nessus	Debian Local Security Checks	high
117931	openSUSE Security Update : otrs (openSUSE-2018-1106)	Nessus	SuSE Local Security Checks	high
112049	Debian DLA-1473-1 : otrs2 security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-14593

high

Tenable Plugins

high

high

high

high

high