CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.5. See the original NVD description below for full technical details.
CVE
CVE-2024-43446
Severity
LOW
CVSS
3.5
EPSS
0.21%
Original NVD Description
An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected