CVE-2010-4758

installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for…

published March 18, 2011

CVSS
—
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.3th percentile
Published
2011-03-18T16:00Z
EPSS history
Timeline
  • 18 MAR 16:00Z
    installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for…
    cvelistv5