CVE-2017-16854

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can…

published December 8, 2017

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01490 · 73.9th percentile
Published
2017-12-08T17:00Z
EPSS history
Timeline
  • 08 DEC 17:00Z
    In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can…
    cvelistv5