VYPR
Unrated severityNVD Advisory· Published Jul 19, 2011· Updated Jun 16, 2026

CVE-2011-2385

CVE-2011-2385

Description

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • OTRS/Iphonehandle9 versions
    cpe:2.3:a:otrs:iphonehandle:0.9.1:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:otrs:iphonehandle:0.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:0.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:0.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:0.9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:0.9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:0.9.6:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:otrs:iphonehandle:1.0.2:*:*:*:*:*:*:*
    • (no CPE)range: <0.9.7, <1.0.3
  • cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.