OTRS Multiple Vulnerabilities (OSA-2021-17, OSA-2021-18)

OTRS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...

CVE-2021-36095

CVE-2021-36095 affects OTRS Community Edition v6.0.1+ and OTRS 7.x up to 7.0.28. The issue arises from the lost password feature, enabling a malicious attacker to determine valid user logins. Vectors/impact are described as a login enumeration through the lost-password flow, with CVSS base metric...