OTRS Information Disclosure Vulnerability (CNVD-2022-29577)

OTRS is an application from the German company OTRS. A service management software. OTRS suffers from an information disclosure vulnerability that originates from the Billing Time ExternalFrontend:: TicketDetailView AccountedTimeDisplay setting is displayed in the Work Order Details view whether ...

CVE-2022-1004: Exposure of Sensitive Information to an Unauthorized Actor

Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...

PT-2022-13585

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns the display of accounted time in the Ticket Detail View, which is part of an external interface. Even when the ExternalFrontend::TicketDetailView setting for...