CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Information Exposure
Summary: open ticket request system (otrs) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-12-20
Last Modified Date: 2019-10-03