CVE-2008-7279: Otrs

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors.

Affected products

• Otrs Otrs: up to and including 2.2.7; version 0.5 only; version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; …

Published 2011-03-18. Last modified 2026-06-16.