CVE-2017-16921
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 20%
from disclosure to weapon44 days
Published on NVDDec 8
1st PoC+44d
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.
Affected products
n/a · n/apublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/43853unverifiedgithubgithub.com/Smarttfoxx/OTRS-4.0.1-6.0.1-Remote-Command-Execution★ 0cve_referencewww.exploit-db.com/exploits/43853/unverifiedcve_referencepacketstormsecurity.com/files/162295/OTRS-6.0.1-Remote-Command-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/162295/OTRS-6.0.1-Remote-Command-Execution.htmlhttps://lists.debian.org/debian-lts-announce/2017/12/msg00015.htmlhttps://www.debian.org/security/2017/dsa-4066https://www.exploit-db.com/exploits/43853/https://www.otrs.com/security-advisory-2017-09-security-update-otrs-framework/