CVE-2019-13458

EPSS 0.38%
Published 21.08.2019 14:15:10
Last modified 21.11.2024 04:24:56
Source cve@mitre.org
CVE-Watchlists
Login
Open
Login

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. An attacker who is logged into OTRS as an agent user with appropriate permissions can leverage OTRS notification tags in templates in order to disclose hashed user passwords.

Affected products Warnungen 0 Metrics 4 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Otrs ≫ Otrs SwEditioncommunity Version >= 5.0.0 <= 5.0.36

Otrs ≫ Otrs SwEditioncommunity Version >= 6.0.0 <= 6.0.19

Otrs ≫ Otrs Version >= 7.0.0 <= 7.0.8

Debian ≫ Debian Linux Version8.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.38%	0.589

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
cve@mitre.org	2.7	1.2	1.4	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N