[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2008-7277":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":97,"references":99,"score":102,"epss_score":103,"epss_percentile":104,"is_kev":105,"cisa_kev_date_added":106,"cisa_kev_due_date":106,"cisa_ssvc":107,"attack_mappings":113,"exploits":120},138852,"CVE-2008-7277","EUVD-2008-7230","Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets.","2011-03-18T16:55:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.5,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL","LOW",true,[20],"CWE-264",[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96],"cpe:2.3:a:otrs:otrs:2.2.0:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1.0:rc2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.3.0:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta5:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.3.0:beta3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.0:rc1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.0:beta4:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.0:beta4:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1:rc1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.0:beta3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.0:beta3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta4:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.0:beta3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta8:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta6:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.0:rc2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.0:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.3.0:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.0:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.9:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:*:beta3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.0:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.0:rc3:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.0:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.0:rc1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta7:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.1.0:rc1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:0.5:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:1.3.0:beta1:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.1.0:beta2:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*",[98],"Otrs Otrs",[100,101],"http:\u002F\u002Fbugs.otrs.org\u002Fshow_bug.cgi?id=3045","http:\u002F\u002Fsource.otrs.org\u002Fviewvc.cgi\u002Fotrs\u002FCHANGES?revision=1.1807",0.53,0.01467,0.73538,false,null,{"timestamp":106,"automatable":108,"tech_impact":109,"exploitation":110,"cisa_decision":111,"cisa_remediation_timeline":112},"no","partial","none",{},"FSU",[114],{"name":115,"source":116,"tactics":117,"technique_id":119},"Exploit Public-Facing Application","attack_vector",[118],"initial-access","T1190",[]]