Open Ticket Request System up to 5.0.34/6.0.17/7.0.6 Report xml injection

Summaryinfo

A vulnerability categorized as critical has been discovered in Open Ticket Request System up to 5.0.34/6.0.17/7.0.6. This issue affects some unknown processing of the component Report Handler. Executing a manipulation can lead to xml injection. The identification of this vulnerability is CVE-2019-9892. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in Open Ticket Request System up to 5.0.34/6.0.17/7.0.6 (Ticket Tracking Software). It has been declared as critical. This vulnerability affects an unknown functionality of the component Report Handler. The manipulation with an unknown input leads to a xml injection vulnerability. The CWE definition for the vulnerability is CWE-91. The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. As an impact it is known to affect confidentiality. CVE summarizes:

An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.

The weakness was shared 05/22/2019 (Website). The advisory is shared for download at community.otrs.com. This vulnerability was named CVE-2019-9892 since 03/20/2019. The exploitation appears to be easy. The attack can be initiated remotely. The successful exploitation needs a single authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1505.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 176890 (Debian Security Update for otrs2 (DLA 1774-1)).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entry VDB-135303 is related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Ticket Tracking Software

Name

• Open Ticket Request System

Version

• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7
• 5.0.8
• 5.0.9
• 5.0.10
• 5.0.11
• 5.0.12
• 5.0.13
• 5.0.14
• 5.0.15
• 5.0.16
• 5.0.17
• 5.0.18
• 5.0.19
• 5.0.20
• 5.0.21
• 5.0.22
• 5.0.23
• 5.0.24
• 5.0.25
• 5.0.26
• 5.0.27
• 5.0.28
• 5.0.29
• 5.0.30
• 5.0.31
• 5.0.32
• 5.0.33
• 5.0.34
• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.0.6
• 6.0.7
• 6.0.8
• 6.0.9
• 6.0.10
• 6.0.11
• 6.0.12
• 6.0.13
• 6.0.14
• 6.0.15
• 6.0.16
• 6.0.17
• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.0.6

License

• free

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion