Design/Logic Flaw

2011-03-1816:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.0%

JSON

Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field.

CPENameOperatorVersion
otrseq2.0.0 beta4
otrseq2.0.0 beta2
otrseq2.1.3
otrseq2.2.4
otrsle2.2.6
otrseq2.2.5
otrseq1.0.2
otrseq2.1.8
otrseq1.1.1
otrseq0.5 beta1