+++++++++++++++++++++++++ OTRS Security Advisory 2013-01 OTRS Help Desk 3.2.4, OTRS ITSM 3.2.3, FAQ 2.2.3 +++++++++++++++++++++++ Release: OTRS Help Desk 3.2.4, OTRS ITSM 3.2.3, FAQ 2.2.3 Release date: 2-April-2013 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2013-01 <security at otrs.org> ------------------------------------------------------------------ ID: OSA-2013-01 Date: 2013-04-02 Title: Information disclosure, Data manipulation Severity: Medium (Overall CVSS Score: 4.1) Fixed in: OTRS 3.2.4, 3.1.14, 3.0.19, OTRS ITSM 3.2.3, 3.1.8, 3.0.7, FAQ 2.2.3, 2.1.4, 2.0.8 http://www.otrs.com/en/open-source/community-news/security-advisories/securi... CVE: CVE-2013-2625 Credits: André Luerssen ------------------------------------------------------------------- To read the entire Security Advisory please follow this link. http://www.otrs.com/en/open-source/community-news/security-advisories/securi... There will also be Release Notes for the newest versions of OTRS Help Desk, OTRS ITSM and the FAQ Module, where this vulnerability is fixed and we recommend an update to one of these new versions. Best regards Josephine Günther ---- Marketing Manager OTRS AG Norsk-Data-Straße 1 61352 Bad Homburg Germany T: +49 (0) 6172 681988 0 F: +49 (0) 9421 56818 18 I: http://www.otrs.com/ Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: André Mindermann (CEO), Christopher Kuhn, Sabine Riedel OTRS 3.2 - More than a Help Desk System – Process and Customer Management – Be an early bird with our special offer