CVE-2019-9753

An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5

Low · published June 3, 2019

CVSS v3.0
3.5
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ Articles, Service Catalogue Items, ITSM Configuration Items.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00871 · 58.2th percentile
Published
2019-06-03T18:05Z
EPSS history
Timeline
  • 03 JUN 18:05Z
    An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5
    cvelistv5