CVE-2010-4761

2011-03-1800:00:00

ubuntu.com

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

45.5%

JSON

The customer-interface ticket-print dialog in Open Ticket Request System
(OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data,
which allows remote authenticated users to obtain potentially sensitive
information from the (1) responsible, (2) owner, (3) accounted time, (4)
pending until, and (5) lock fields by reading this dialog.