PT-2011-3128
CVE-2011-1433
·
تاريخ النشر
2011-03-18
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Open Ticket Request System (OTRS) versions prior to 3.0.6
Description
The issue in OTRS allows context-dependent attackers to obtain sensitive information. This is due to the AgentInterface and CustomerInterface components placing cleartext credentials into the session data in the database. Attackers can read the
UserLogin and UserPW fields to gain access to sensitive information.Recommendations
For versions prior to 3.0.6, update to version 3.0.6 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾