NetSight
IP …
medium6.5

CVE-2017-16854

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can us…

Impact

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets.

Affected products

VendorProductAffected versions
OtrsOtrs
from 3.3.0 through 3.3.20
after 4.0.0 through 4.0.26
from 5.0.0 through 5.0.24
from 6.0.0 through 6.0.1
DebianDebian Linux
Versions 7.0, 8.0, 9.0

Weakness classification

CWE-200

References