high8.8
CVE-2017-15864
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and p…
Impact
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | from 3.3.0 through 3.3.18 |
| Debian | Debian Linux | Versions 7.0, 8.0, 9.0 |
References
- NVD record
- CVE.org record
- https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html
- https://www.debian.org/security/2017/dsa-4047
- https://www.otrs.com/security-advisory-2017-06-security-update-otrs-3-3/
- https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html
- https://www.debian.org/security/2017/dsa-4047
- https://www.otrs.com/security-advisory-2017-06-security-update-otrs-3-3/