NetSight
IP …
medium4.3

CVE-2008-7281

Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote atta…

Impact

Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field.

Affected products

VendorProductAffected versions
OtrsOtrs
through 2.2.6
Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2

Weakness classification

CWE-200

References