CVE-2023-38058 — Tickets can be moved without permissions
An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated attacker to to perform a move of an ticket without the nee…
Published: 2023-07-24 · CVSS: 4.1 · CVSS 3.1
An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated attacker to to perform a move of an ticket without the needed permission. This issue affects OTRS: from 8.0.X before 8.0.35.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7