PT-2011-1715 · Otrs · Otrs

Published 2011-03-18 · Updated 2011-03-22 · CVE-2010-4766

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions prior to 2.4.7

Description The issue concerns the AgentTicketForward feature in OTRS, which fails to properly remove inline images from HTML e-mail messages. This allows remote attackers to obtain potentially sensitive image information by reading a forwarded message in a standard e-mail client.

Recommendations For versions prior to 2.4.7, update to version 2.4.7 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-4766

Affected Products

Otrs

References · 7

• 🔥 http://bugs.otrs.org/show_bug.cgi?id=4818 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2010-4766 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4766 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4766 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4766 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4766 · Note
• http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 · Note