CVE-2020-1777CWE-200

Agent names disclosed in chat feature

Medium · published October 15, 2020

CVSS v3.1
4.3
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00842 · 57.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-10-15T18:52Z
EPSS history
Timeline
  • 15 OCT 18:52Z
    Agent names disclosed in chat feature
    cvelistv5