Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-9753
HistoryJun 03, 2019 - 7:29 p.m.

Design/Logic Flaw

2019-06-0319:29:00
PRIOn knowledge base
www.prio-n.com
2

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ Articles, Service Catalogue Items, ITSM Configuration Items.

CPENameOperatorVersion
otrsge7.0.0
otrslt7.0.5

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%