CVE-2010-4758

2011-03-1800:00:00

ubuntu.com

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.9%

JSON

installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an
Inbound Mail Password field that uses the text type, instead of the
password type, for its INPUT element, which makes it easier for physically
proximate attackers to obtain the password by reading the workstation
screen.