PT-2011-1710
CVE-2010-4761
·
تاريخ النشر
2011-03-18
·
تاريخ التحديث
2011-03-22
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Open Ticket Request System (OTRS) versions prior to 3.0.0-beta3
Description
The issue concerns the customer-interface ticket-print dialog, which fails to properly restrict customer-visible data. This allows remote authenticated users to obtain potentially sensitive information from various fields, including the
responsible, owner, accounted time, pending until, and lock fields, by reading the dialog.Recommendations
For versions prior to 3.0.0-beta3, update to version 3.0.0-beta3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾