OTRS Help Desk CVE-2014-2554 Clickjacking Vulnerability
BID:66567
Info
OTRS Help Desk CVE-2014-2554 Clickjacking Vulnerability
| Bugtraq ID: | 66567 |
| Class: | Design Error |
| CVE: |
CVE-2014-2554 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 01 2014 12:00AM |
| Updated: | Jun 10 2014 01:55PM |
| Credit: | Adam Ziaja |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
OTRS Help Desk CVE-2014-2554 Clickjacking Vulnerability
OTRS Help Desk is prone to a clickjacking vulnerability.
Successful exploits will allow an authenticated attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
OTRS Help Desk 3.1.x, 3.2.x, and 3.3.x are vulnerable.
OTRS Help Desk is prone to a clickjacking vulnerability.
Successful exploits will allow an authenticated attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
OTRS Help Desk 3.1.x, 3.2.x, and 3.3.x are vulnerable.
Exploit / POC
OTRS Help Desk CVE-2014-2554 Clickjacking Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
Solution / Fix
OTRS Help Desk CVE-2014-2554 Clickjacking Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.