PT-2019-19845 · Otrs · Otrs

Published 2019-06-03 · Updated 2020-03-10 · CVE-2019-9753

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 7.0.0 through 7.0.5

Description An issue in OTRS allows an attacker who is logged in as an agent or customer user to disclose information from invalid system entities using the search result screens. The affected entities include Custom Pages, FAQ Articles, Service Catalogue Items, and ITSM Configuration Items.

Recommendations For OTRS versions 7.0.0 through 7.0.5, update to version 7.0.5 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2019-9753

Affected Products

Otrs

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-9753 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9753 · Vendor Advisory
• https://community.otrs.com/security-advisory-2019-03-security-update-for-otrs-framework · Vendor Advisory
• https://t.me/cvenotify/1445 · Telegram Post
• https://t.me/cibsecurity/10404 · Telegram Post