CVE-2011-2385

CVE-2011-2385 describes a privilege escalation vulnerability in the iPhoneHandle package (versions 0.9.x before 0.9.7 and 1.0.x before 1.0.3) of Open Ticket Request System (OTRS). This flaw allows remote authenticated users to gain elevated privileges by improperly restricting access to the iPhoneHandle interface, enabling them to read or modify core OTRS objects. With a CVSS score of 6.5, this vulnerability is of medium severity, requiring authentication (Au:S) but having low attack complexity (AC:L) over a network (AV:N). Successful exploitation could lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.