Skip to content
OpenAdvisories
High WID-SEC-2024-1924 3 CVEs

OTRS: Mehrere Schwachstellen

Published Aug 25, 2024 · Updated Aug 25, 2024 · de-DE

Vendor: OTRS Product: OTRS Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder vertrauliche Informationen offenzulegen.

Product

Das Open Ticket Request System (OTRS) ist ein Ticketsystem für Help-Desks.

Vulnerabilities 3

  • High 8.2
    CVE-2024-43444

    Passwords are written to Admin Log Module

    Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled. This issue affects: * OTRS from 7.0.…

    OTRS OTRS ((OTRS)) Community Edition znuny Ubuntu
  • Medium 4.9
    CVE-2024-43442

    Stored XSS in System Configuration

    Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in  OTRS (System Configuration modules) and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the System Configuration targeting other admins…

    OTRS OTRS ((OTRS)) Community Edition znuny Ubuntu
  • Medium 4.9
    CVE-2024-43443

    Stored XSS in process management

    Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Management modules of OTRS and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the Process Management targeting other admins. Th…

    OTRS OTRS ((OTRS)) Community Edition znuny Ubuntu

Revision history

  1. #1

    Initiale Fassung

References