PT-2017-14599
CVE-2017-16854
·
تاريخ النشر
2017-12-08
·
تاريخ التحديث
2019-11-25
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Open Ticket Request System (OTRS) versions 3.3.20 and earlier
Open Ticket Request System (OTRS) versions 4.0.26 and earlier
Open Ticket Request System (OTRS) versions 5.0.24 and earlier
Open Ticket Request System (OTRS) versions 6.0.1 and earlier
Description
The issue allows an attacker who is logged in as a customer to disclose internal article information of their customer tickets using the ticket search form.
Recommendations
For versions 3.3.20 and earlier, update to a version later than 3.3.20.
For versions 4.0.26 and earlier, update to a version later than 4.0.26.
For versions 5.0.24 and earlier, update to a version later than 5.0.24.
For versions 6.0.1 and earlier, update to a version later than 6.0.1.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾