Lucene search

[email protected]CVE-2022-32739

HistoryJun 13, 2022 - 8:15 a.m.

CVE-2022-32739

2022-06-1308:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2022-32739

security configuration

calendar sharing

public url

ics file

otrs release number

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

30.7%

JSON

When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number.

CPENameOperatorVersion
otrs:otrsotrslt7.0.35
otrs:otrsotrslt8.0.23
otrs:calendar_resource_planningotrs calendar resource planninglt7.0.31
otrs:calendar_resource_planningotrs calendar resource planninglt8.0.23

CPE	Name	Operator	Version
otrs:otrs	otrs	lt	7.0.35
otrs:otrs	otrs	lt	8.0.23
otrs:calendar_resource_planning	otrs calendar resource planning	lt	7.0.31
otrs:calendar_resource_planning	otrs calendar resource planning	lt	8.0.23

References

otrs.com/release-notes/otrs-security-advisory-2022-07/

Social References

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

30.7%

JSON

Related for CVE-2022-32739

cvelist1 prion1 ubuntucve1 openvas1