PT-2020-15052 · Otrs · Otrs

Published 2020-06-08 · Updated 2021-10-19 · CVE-2020-1775

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OTRS versions 8.0.3 and prior versions OTRS versions 7.0.17 and prior versions

Description The issue affects the visibility of BCC recipients in emails sent from OTRS, making them visible in the article detail on the external interface.

Recommendations For OTRS versions 8.0.3 and prior, update to a version later than 8.0.3 to resolve the issue. For OTRS versions 7.0.17 and prior, update to a version later than 7.0.17 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-1775

Affected Products

Otrs

References · 3

• https://osv.dev/vulnerability/CVE-2020-1775 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1775 · Security Note
• https://otrs.com/release-notes/otrs-security-advisory-2020-12 · Vendor Advisory