Unrated severityNVD Advisory· Published Apr 1, 2008· Updated Jun 16, 2026

CVE-2008-1515

Description

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OTRS/Otrs2 versions
cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*range: >=2.1.0,<2.1.8
- (no CPE)range: 2.1.x before 2.1.8, 2.2.x before 2.2.6

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.htmlnvdThird Party Advisory
otrs.org/advisory/OSA-2008-01-en/nvdVendor Advisory
secunia.com/advisories/29585nvdThird Party Advisory
secunia.com/advisories/29622nvdThird Party Advisory
secunia.com/advisories/29859nvdThird Party Advisory
www.securityfocus.com/bid/28647nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/41577nvdThird Party AdvisoryVDB Entry
www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000