[prev in list] [next in list] [prev in thread] [next in thread]
List: oss-security
Subject: [oss-security] Re: [Ticket#2014012942020471] CVE Request: otrs: CSRF issue in customer web interface
From: Jens Bothe via OTRS Security Team <security () otrs ! org>
Date: 2014-01-29 10:14:48
Message-ID: 1390990488.513834.821092246.4792691.27 () portal ! otrs ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi,
2014-01-29 10:58 (+1) - Salvatore Bonaccorso wrote: A CSRF issue in otrs was
announced in [1]. Is a CVE for this issue
already assigned?
For the OSA-2014-01 we don't have a CVE, just the OTRS Bug report.
Regards,
Jens Bothe
--
OTRS AG
Norsk-Data-Straße 1
61352 Bad Homburg
T: +49 (0) 6172 681988 0
F: +49 (0) 9421 56818 18
E: [1]sales@otrs.com
I: [2]http://www.otrs.com/
Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID:
DE256610065
Chairman: Burchard Steinbild, Managing Board: André Mindermann (CEO),
Christopher Kuhn, Sabine Riedel
Easier Planning and Improved Overviews - Enhance your Service Management with
OTRS 3.3 - [3]Download and Test the Stable Release Now!
[1] mailto:sales@otrs.com
[2] http://www.otrs.com/
[3] https://www.otrs.com/new-in-otrs-3-3/
[Attachment #5 (text/html)]
<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; \
charset=utf-8"/></head><body style="font-family:Geneva,Helvetica,Arial,sans-serif; font-size: \
12px !important;">Hi,<br /> 2014-01-29 10:58 (+1) - Salvatore Bonaccorso wrote:
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt" type="cite">A \
CSRF issue in otrs was announced in [1]. Is a CVE for this issue<br /> already assigned?<br />
</div>
<br />
For the OSA-2014-01 we don't have a CVE, just the OTRS Bug report.<br />
<br />
<br />
<span style="font-size:12px">Regards,<br />
<br />
Jens Bothe<br />
<br />
-- </span><br />
OTRS AG<br />
Norsk-Data-Straße 1<br />
61352 Bad Homburg<br />
T: +49 (0) 6172 681988 0<br />
F: +49 (0) 9421 56818 18<br />
E: <a href="mailto:sales@otrs.com" target="_blank">sales@otrs.com</a><br />
I: <a href="http://www.otrs.com/" target="_blank">http://www.otrs.com/</a>
<p><span style="font-size:8px">Business location: Bad Homburg, Country Court: Bad Homburg, HRB \
10751, VAT ID: DE256610065<br />
Chairman: Burchard Steinbild, Managing Board: André Mindermann (CEO), Christopher Kuhn, Sabine \
Riedel</span><br /> <br />
<strong>Easier Planning and Improved Overviews</strong> - <strong><span \
style="color:#FF0000">Enhance your Service Management with OTRS 3.3</span></strong> - \
<strong><a href="https://www.otrs.com/new-in-otrs-3-3/" target="_blank">Download and Test the \
Stable Release Now!</a></strong></p></body></html>
["pgp_sign.asc" (application/pgp-signature)]
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic