CVE-2017-16854

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 3.3.20 and earlier Open Ticket Request System (OTRS) versions 4.0.26 and earlier Open Ticket Request System (OTRS) versions 5.0.24 and earlier Open Ticket Request System (OTRS) versions 6.0.1 and earlier

Description The issue allows an attacker who is logged in as a customer to disclose internal article information of their customer tickets using the ticket search form.

Recommendations For versions 3.3.20 and earlier, update to a version later than 3.3.20. For versions 4.0.26 and earlier, update to a version later than 4.0.26. For versions 5.0.24 and earlier, update to a version later than 5.0.24. For versions 6.0.1 and earlier, update to a version later than 6.0.1.