2 matches found
OTRS < 2.2.5 S/MIME OpenSSL Cryptographic Entropy Weakness
Open Ticket Request System OTRS is prone to a cryptographic entropy weakness. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
5CVSS6.4AI score0.01984EPSS
SaveExploits0
CVE-2008-7278
Summary: The CVE-2008-7278 entry concerns the S/MIME feature in Open Ticket Request System (OTRS) prior to 2.2.5 and prior to 2.3.0-beta1 for 2.3.x, where the RANDFILE environment variable for OpenSSL is not configured correctly, potentially reducing entropy and making it easier for remote attack...
5CVSS6.8AI score0.01984EPSS
SaveExploits0References3Affected Software1
20