CVE-2008-7278

2022-10-0316:13:53

mitre

www.cve.org

otrs security vulnerability

s/mime

randfile

openssl

email encryption

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file.