CVE

Id
47345  
CVE No.
CVE-2010-4761  
Status
Candidate  
Description
The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the (1) responsible, (2) owner, (3) accounted time, (4) pending until, and (5) lock fields by reading this dialog.  
Phase
Assigned (20110318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517213 47345 CVE-2010-4761 CONFIRM:http://bugs.otrs.org/show_bug.cgi?id=5875  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33742 JVNDB-2011-003984 OTRS の Kernel::System::Main::FileWrite メソッドにおける icketCounter.log のデータを破損される脆弱性 Open Ticket Request System (OTRS) の Kernel::System::Main::FileWrite メソッドは、競合状態が発生するため TicketCounter.log のデータを破損される脆弱性が存在します。 CVE-2010-4765 47345 4.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003984.html  View