DeutschShown in its original language — a full translation is planned for a future version.
OTRS: Mehrere Schwachstellen
view advisory published 2025-01-26
Ein Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um Daten zu manipulieren, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen und sich unbefugten Zugang zu verschaffen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-43446US | — | — | ||
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to modify prot… | ||||
| CVE-2025-24387US | medium6.5 | — | ||
A vulnerability in OTRS Application Server allows session hijacking due to missing attributes for sensitive
cookie settings in HTTPS sessions. A request to an OTRS endpoint from a… | ||||
| CVE-2025-24390US | — | — | ||
A vulnerability in OTRS Application Server and reverse proxy settings allows session hijacking due to missing attributes for sensitive cookie settings in HTTPS sessions.
This issu… | ||||
| CVE-2025-24389US | — | — | ||
Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)) Community Edition log mechanism and mails send to the system administrator.
This… | ||||
| CVE-2024-43445US | — | — | ||
A vulnerability exists in OTRS and ((OTRS Community Edition)) that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerabil… | ||||
02
references
External citations — patches, advisories, analysis.
- OTRS Security Advisory vom 2025-01-26external
- OTRS Security Advisory vom 2025-01-26external
- OTRS Security Advisory vom 2025-01-26external
- OTRS Security Advisory vom 2025-01-26external
- OTRS Security Advisory vom 2025-01-26external
- WID-SEC-W-2025-0193 - CSAF Versionself
- WID-SEC-2025-0193 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan