CVE-2020-1775CWE-200

Information disclosure in external interface

Low · published June 8, 2020

CVSS v3.1
3.5
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

BCC recipients in mails sent from OTRS are visible in article detail on external interface. This issue affects OTRS: 8.0.3 and prior versions, 7.0.17 and prior versions.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-06-08T15:29Z
EPSS history
Timeline
  • 08 JUN 15:29Z
    Information disclosure in external interface
    cvelistv5