CVEvulnerability
CVE-2019-12497
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-06-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. In the customer or external frontend, personal information of agents (e.g., Name and mail address) can be disclosed in external notes.
Affected configurations
• otrs otrs (>= 5.0.0 <= 5.0.36)
• otrs otrs (>= 6.0.0 <= 6.0.19)
• otrs otrs (>= 7.0.0 <= 7.0.8)
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html Broken Link
- https://community.otrs.com/category/security-advisories-en/ Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/06/msg00004.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html lists.debian.org
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html Broken Link
- https://community.otrs.com/category/security-advisories-en/ Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/06/msg00004.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html lists.debian.org