CVE Catalog
CVE-2023-38058
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk0.33%
24th percentile - higher than 24% of all known CVEs
Summary
An improper privilege check in the OTRS ticket move action in the agent interface allows any authenticated attacker to perform a move of a ticket without the needed permission.
Risk Assessment
An attacker with access to the agent interface can manipulate tickets, potentially leading to unauthorized changes in the system.
Recommendation
It is recommended to update OTRS to version 8.0.35 or later to mitigate this vulnerability.
Original NVD description (English source)
An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated attacker to to perform a move of an ticket without the needed permission. This issue affects OTRS: from 8.0.X before 8.0.35.