OTRS Information Disclosure Vulnerability (CNVD-2022-29577)

OTRS is an application from the German company OTRS. A service management software. OTRS suffers from an information disclosure vulnerability that originates from the Billing Time ExternalFrontend:: TicketDetailView AccountedTimeDisplay setting is displayed in the Work Order Details view whether ...

CVE-2022-1004: Exposure of Sensitive Information to an Unauthorized Actor

Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...