CVE-2013-2625: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Opensuse Opensuse: version 12.2 only; version 12.3 only
• Otrs Faq: from 2.0.0, before 2.0.8 (fixed in 2.0.8); from 2.1.0, before 2.1.4 (fixed in 2.1.4); from 2.2.0, before 2.2.3 (fixed in 2.2.3)
• Otrs Otrs Help Desk: from 3.0.0, before 3.0.19 (fixed in 3.0.19); from 3.1.0, before 3.1.14 (fixed in 3.1.14); after 3.2.0, before 3.2.4 (fixed in 3.2.4)
• Otrs Otrs Itsm: from 3.0.0, before 3.0.7 (fixed in 3.0.7); from 3.1.0, before 3.1.8 (fixed in 3.1.8); from 3.2.0, before 3.2.3 (fixed in 3.2.3)

Published 2019-11-27. Last modified 2026-06-16.