ZSA-2018-08

Problem

An attacker can modify unprotected agents and customer-user attributes using special HTML form parameters.

Workaround

As a workaround, you can replace the affected files.

Solution

Upgrade to the latest available OTRS patch level (https://ftp.otrs.org/pub/otrs/).

Download

• Security patch for OTRS 5
• Security patch for OTRS 4

References

• Vendor advisory
• CVE-2018-19141