medium5.3
CVE-2021-36095
Malicious attacker is able to find out valid user logins by using the "lost password" feature.
Impact
Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | from 6.0.1 from 7.0.0 before 7.0.29 |