CVE-2011-2385

no score yetEPSS 1.7%

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-07-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

otrs:iphonehandle
otrs:otrs

References

http://osvdb.org/73885
http://otrs.org/advisory/OSA-2011-02-en/
http://secunia.com/advisories/45227
http://www.securityfocus.com/bid/48678
https://exchange.xforce.ibmcloud.com/vulnerabilities/68558

Check your stack JSON