NVD

Id
8374  
Name
CVE-2011-1433  
Description
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-03-18  
Modified Date
2011-09-06  
Seq
2011-1433  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47977 8374 CVE-2011-1433 http://bugs.otrs.org/show_bug.cgi?id=6878  View
47978 8374 CVE-2011-1433 http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807  View
47979 8374 CVE-2011-1433 otrs-agentinterface-info-disc(66196)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34154 JVNDB-2011-004396 OTRS の AgentInterface または CustomerInterface コンポーネントにおける重要な情報を取得される脆弱性 Open Ticket Request System (OTRS) の AgentInterface または CustomerInterface コンポーネントは、データベースのセッションデータへ平文の資格情報を配置するため、重要な情報を取得される脆弱性が存在します。 CVE-2011-1433 49340 CVE-2011-1433 8374 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004396.html 2011-03-18 2012-03-27 View