CVE-2010-4760

2011-03-1816:00:00

mitre

www.cve.org

otrs

email notification

vulnerability

authenticated users

sensitive information

ticket reading

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

38.3%

JSON

Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket.