NVD

Id
15999  
Name
CVE-2010-4761  
Description
The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the (1) responsible, (2) owner, (3) accounted time, (4) pending until, and (5) lock fields by reading this dialog.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2011-03-18  
Modified Date
2011-03-22  
Seq
2010-4761  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90559 15999 CVE-2010-4761 http://bugs.otrs.org/show_bug.cgi?id=5875  View
90560 15999 CVE-2010-4761 http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33738 JVNDB-2011-003980 OTRS の顧客インターフェースチケット印刷ダイアログにおける重要な情報を取得される脆弱性 Open Ticket Request System (OTRS) の顧客インターフェースのチケット印刷ダイアログは、適切に顧客可視データを制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-4761 47341 CVE-2010-4761 15999 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003980.html 2011-03-18 2012-03-27 View